Technical Usability Assessment of Security Analysis Tools for Ethereum Based Smart Contracts

被引:0
|
作者
Zeeshan, Rana [1 ]
Tal, Irina [2 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin, Ireland
[2] Dublin City Univ, Sch Comp, Lero, Dublin, Ireland
关键词
Smart contracts; Solidity; Blockchain; Ethere-um; Security Analysis Tools; Vulnerability analysis; Usability study;
D O I
10.1109/QRS-C57518.2022.00021
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Over the past few years, Ethereum has surfaced as a widely adopted standard Blockchain platform that is increasingly being utilized to develop Decentralized Applications (DApps). By introducing Smart Contracts to software developers and programmers, Ethereum has triggered the development of countless Blockchain solutions. Among its main applications, many involve the exchange of valuable financial assets. Simply put, we cannot afford to base our Blockchain solutions or applications on potentially vulnerable smart contracts. This is where the Security Analysis Tools come into picture, for the timely detection of vulnerabilities in the Smart Contracts. Since this is a recent phenomenon, it offers a lot of research opportunities for us to contribute towards improving the existing state of security analysis tools and resolving their shortcomings. Although most of these tools have been evaluated in terms of effectiveness, installation and reliability; the literature largely lacks the technical usability perspective i.e. execution and evaluation. Therefore, based on a selection criteria, we committed our time to 4 such tools for an extensive usability assessment. We designed our usability study in a manner that combined the advantages of multiple evaluation methods. The results were useful not only in terms of comparative analysis, but also as a validation of the need of identified usability improvements.
引用
收藏
页码:87 / 95
页数:9
相关论文
共 50 条
  • [21] Taxonomic insights into ethereum smart contracts by linking application categories to security vulnerabilities
    Ortu, Marco
    Ibba, Giacomo
    Destefanis, Giuseppe
    Conversano, Claudio
    Tonelli, Roberto
    SCIENTIFIC REPORTS, 2024, 14 (01):
  • [22] Using Automated Reasoning Techniques for Enhancing the Efficiency and Security of (Ethereum) Smart Contracts
    Albert, Elvira
    Gordillo, Pablo
    Hernandez-Cerezo, Alejandro
    Rodriguez-Nunez, Clara
    Rubio, Albert
    AUTOMATED REASONING, IJCAR 2022, 2022, 13385 : 3 - 7
  • [23] Sound analysis and migration of data from Ethereum smart contracts
    Maha Ayub
    Muhammad Waiz Khan
    Muhammmad Umar Janjua
    Automated Software Engineering, 2024, 31
  • [24] Sound analysis and migration of data from Ethereum smart contracts
    Ayub, Maha
    Khan, Muhammad Waiz
    Janjua, Muhammmad Umar
    AUTOMATED SOFTWARE ENGINEERING, 2024, 31 (01)
  • [25] Storage State Analysis and Extraction of Ethereum Blockchain Smart Contracts
    Ayub, Maha
    Saleem, Tania
    Janjua, Muhammad
    Ahmad, Talha
    ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY, 2023, 32 (03)
  • [26] Ethereum smart contracts: Analysis and statistics of their source code and opcodes
    Bistarelli, Stefano
    Mazzante, Gianmarco
    Micheletti, Matteo
    Mostarda, Leonardo
    Sestili, Davide
    Tiezzi, Francesco
    INTERNET OF THINGS, 2020, 11
  • [27] An ABI-based Classification Approach for Ethereum Smart Contracts
    Sun, Xun
    Lin, Xingwei
    Liao, Zhou
    2021 IEEE INTL CONF ON DEPENDABLE, AUTONOMIC AND SECURE COMPUTING, INTL CONF ON PERVASIVE INTELLIGENCE AND COMPUTING, INTL CONF ON CLOUD AND BIG DATA COMPUTING, INTL CONF ON CYBER SCIENCE AND TECHNOLOGY CONGRESS DASC/PICOM/CBDCOM/CYBERSCITECH 2021, 2021, : 99 - 104
  • [28] Ethereum Smart Contract Analysis Tools: A Systematic Review
    Kushwaha, Satpal Singh
    Joshi, Sandeep
    Singh, Dilbag
    Kaur, Manjit
    Lee, Heung-No
    IEEE ACCESS, 2022, 10 : 57037 - 57062
  • [29] Versioned Analysis of Software Quality Indicators and Self-admitted Technical Debt in Ethereum Smart Contracts with Ethstractor
    Hassan, Khalid
    Moradi, Saeed
    Chowdhury, Shaiful
    Rouhani, Sara
    2024 IEEE INTERNATIONAL CONFERENCE ON BLOCKCHAIN, BLOCKCHAIN 2024, 2024, : 512 - 519
  • [30] A Hybrid Formal Verification System in Coq for Ensuring the Reliability and Security of Ethereum-Based Service Smart Contracts
    Yang, Zheng
    Lei, Hang
    Qian, Weizhong
    IEEE ACCESS, 2020, 8 : 21411 - 21436