一句话：通过混合方法实证调查从业者对智能合约安全的认知、实践与开发流程整合。
智能合约安全事件造成重大财务损失，已有大量研究，但从业者实际如何构建安全性尚不清楚。本文采用定性与定量混合方法，访谈13名从业者，并调查来自6大洲35个国家的156名受访者，考察其对智能合约安全的认知与实践。研究揭示从业者进行安全建设的动机与阻碍，安全措施和策略如何融入开发生命周期，并发现区块链平台对安全认知和实践有统计显著影响。基于发现，作者提出未来研究方向和对从业者的建议。
Smart contracts have been plagued by security incidents, which resulted in substantial financial losses. Given numerous research efforts in addressing the security issues of smart contracts, we wondered how software practitioners build security into smart contracts in practice. We performed a mixture of qualitative and quantitative studies with 13 interviewees and 156 survey respondents from 35 countries across six continents to understand practitioners' perceptions and practices on smart contract security. Our study uncovers practitioners' motivations and deterrents of smart contract security, as well as how security efforts and strategies fit into the development lifecycle. We also find that blockchain platforms have a statistically significant impact on practitioners' security perceptions and practices of smart contract development. Based on our findings, we highlight future research directions and provide recommendations for practitioners.
DOI 原文 · arXiv · PDF（开放获取） · DBLP
@inproceedings{Wan00CLY21a,
title = {Smart Contract Security: A Practitioners' Perspective},
author = {Zhiyuan Wan and Xin Xia and David Lo and Jiachi Chen and Xiapu Luo and Xiaohu Yang},
booktitle = {ICSE},
year = {2021},
doi = {10.1109/icse43902.2021.00127}
}