一句话：提出 S-gram，一种语义感知的以太坊智能合约安全审计方法，以克服现有方法依赖预定义模式或高开销分析的局限。
以太坊智能合约应用广泛但极易受到攻击，安全审计至关重要。现有审计技术要么依赖预定义缺陷模式，漏洞发现能力有限；要么依赖高开销的程序分析，难以规模化，因此对以太坊而言不够充分。本文提出 S-gram，一种语义感知的安全审计方法。该方法通过提取智能合约的语义特征来识别漏洞，旨在克服上述局限，实现更有效且实用的安全审计。
Smart contracts, as a promising and powerful application on the Ethereum blockchain, have been growing rapidly in the past few years. Since they are highly vulnerable to different forms of attacks, their security becomes a top priority. However, existing security auditing techniques are either limited in fnding vulnerabilities (rely on pre-defned bug paterns) or very expensive (rely on program analysis), thus are insufcient for Ethereum.
DOI 原文 ·
@inproceedings{paperbot4712,
title = {S-gram: towards semantic-aware security auditing for Ethereum smart contracts},
author = {Han Liu and Chao Liu and Wenqi Zhao and Yu Jiang and Jiaguang Sun},
booktitle = {ASE},
year = {2018},
doi = {10.1145/3238147.3240728}
}