Technical Usability Assessment of Security Analysis Tools for Ethereum Based Smart Contracts

被引:0
|
作者
Zeeshan, Rana [1 ]
Tal, Irina [2 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin, Ireland
[2] Dublin City Univ, Sch Comp, Lero, Dublin, Ireland
关键词
Smart contracts; Solidity; Blockchain; Ethere-um; Security Analysis Tools; Vulnerability analysis; Usability study;
D O I
10.1109/QRS-C57518.2022.00021
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Over the past few years, Ethereum has surfaced as a widely adopted standard Blockchain platform that is increasingly being utilized to develop Decentralized Applications (DApps). By introducing Smart Contracts to software developers and programmers, Ethereum has triggered the development of countless Blockchain solutions. Among its main applications, many involve the exchange of valuable financial assets. Simply put, we cannot afford to base our Blockchain solutions or applications on potentially vulnerable smart contracts. This is where the Security Analysis Tools come into picture, for the timely detection of vulnerabilities in the Smart Contracts. Since this is a recent phenomenon, it offers a lot of research opportunities for us to contribute towards improving the existing state of security analysis tools and resolving their shortcomings. Although most of these tools have been evaluated in terms of effectiveness, installation and reliability; the literature largely lacks the technical usability perspective i.e. execution and evaluation. Therefore, based on a selection criteria, we committed our time to 4 such tools for an extensive usability assessment. We designed our usability study in a manner that combined the advantages of multiple evaluation methods. The results were useful not only in terms of comparative analysis, but also as a validation of the need of identified usability improvements.
引用
收藏
页码:87 / 95
页数:9
相关论文
共 50 条
  • [31] Static Profiling and Optimization of Ethereum Smart Contracts Using Resource Analysis
    Correas, Jesus
    Gordillo, Pablo
    Roman-Diez, Guillermo
    IEEE ACCESS, 2021, 9 : 25495 - 25507
  • [32] Towards Analyzing the Complexity Landscape of Solidity Based Ethereum Smart Contracts
    Hegedus, Peter
    2018 IEEE/ACM 1ST INTERNATIONAL WORKSHOP ON EMERGING TRENDS IN SOFTWARE ENGINEERING FOR BLOCKCHAIN (WETSEB), 2018, : 35 - 39
  • [33] SmartFast: an accurate and robust formal analysis tool for Ethereum smart contracts
    Li, Zhaoxuan
    Lu, Siqi
    Zhang, Rui
    Xue, Rui
    Ma, Wenqiu
    Liang, Rujin
    Zhao, Ziming
    Gao, Sheng
    EMPIRICAL SOFTWARE ENGINEERING, 2022, 27 (07)
  • [34] SmartFast: an accurate and robust formal analysis tool for Ethereum smart contracts
    Zhaoxuan Li
    Siqi Lu
    Rui Zhang
    Rui Xue
    Wenqiu Ma
    Rujin Liang
    Ziming Zhao
    Sheng Gao
    Empirical Software Engineering, 2022, 27
  • [35] Towards Analyzing the Complexity Landscape of Solidity Based Ethereum Smart Contracts
    Hegedus, Peter
    TECHNOLOGIES, 2019, 7 (01)
  • [36] ADEFGuard: Anomaly detection framework based on Ethereum smart contracts behaviours
    Ndiaye, Malaw
    Diallo, Thierno Ahmadou
    Konate, Karim
    BLOCKCHAIN-RESEARCH AND APPLICATIONS, 2023, 4 (03):
  • [37] A Massive Analysis of Ethereum Smart Contracts Empirical Study and Code Metrics
    Pinna, Andrea
    Ibba, Simona
    Baralla, Gavina
    Tonelli, Roberto
    Marchesi, Michele
    IEEE ACCESS, 2019, 7 : 78194 - 78213
  • [38] eThor: Practical and Provably Sound Static Analysis of Ethereum Smart Contracts
    Schneidewind, Clara
    Grishchenko, Ilya
    Scherer, Markus
    Maffei, Matteo
    CCS '20: PROCEEDINGS OF THE 2020 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, 2020, : 621 - 640
  • [39] Classification Method of Ethereum Smart Contracts Based on Statistical Model Checking
    Lp, Miaoer
    Zhu, Yi
    Liu, Yali
    Yin, Chan
    2024 IEEE 24TH INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY AND SECURITY, QRS, 2024, : 733 - 744
  • [40] S-GRAM: Towards Semantic-Aware Security Auditing for Ethereum Smart Contracts
    Liu, Han
    Liu, Chao
    Zhao, Wenqi
    Jiang, Yu
    Sun, Jiaguang
    PROCEEDINGS OF THE 2018 33RD IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMTED SOFTWARE ENGINEERING (ASE' 18), 2018, : 814 - 819