一句话:提出 EClone,利用符号化交易概要检测以太坊智能合约的语义克隆,以应对克隆带来的安全与资源威胁。
以太坊允许任何人编写和部署智能合约,导致链上出现大量相似乃至语义等价的合约克隆。这些克隆可能放大安全攻击、造成资源浪费等严重威胁。为此,作者提出 EClone,其核心思想是通过符号化交易概要(symbolic transaction sketch)来刻画合约的交易行为,从而检测语义克隆,而非仅依赖语法或字节码相似性。给定摘要仅说明该工具面向以太坊语义克隆检测,并未给出具体技术细节、数据集、指标或实验结果,因此其检测精度、可扩展性与实际效果尚无法从现有信息评估。
The Ethereum ecosystem has created a prosperity of smart contract applications in public blockchains, with transparent, traceable and programmable transactions. However, the flexibility that everybody can write and deploy smart contracts on Ethereum causes a large collection of similar contracts, i.e., clones. In practice, smart contract clones may amplify severe threats like security attacks, resource waste etc.
DOI 原文 ·
@inproceedings{paperbot4648,
title = {EClone: detect semantic clones in Ethereum via symbolic transaction sketch},
author = {Han Liu and Zhiqiang Yang and Chao Liu and Yu Jiang and Wenqi Zhao and Jiaguang Sun},
booktitle = {FSE},
year = {2018},
doi = {10.1145/3236024.3264596}
}