一句话:指出现有智能合约安全研究虽多,但其是否真正提升现实中合约安全性仍不明确。
以太坊等区块链平台通过智能合约支持支付、拍卖等金融交易。学术界对智能合约安全高度关注,报告了多种安全漏洞,并开发静态分析工具与验证框架来检测漏洞。然而,目前仍不清楚学术界这些大量努力是否确实提升了现实中智能合约的安全性。本文以此为核心问题,关注智能合约安全研究与实际部署之间的差距。摘要未提供具体研究方法、评估对象或关键结果,因此只能确定其问题意识:需要实证检验学术工具与真实合约安全之间的关系。
Ethereum, one of the most popular blockchain platforms, provides financial transactions like payments and auctions through smart contracts. Due to the immense interest in smart contracts in academia, the research community of smart contract security has made a significant improvement recently. Researchers have reported various security vulnerabilities in smart contracts, and developed static analysis tools and verification frameworks to detect them. However, it is unclear whether such great efforts from academia has indeed enhanced the security of smart contracts in reality.
DOI 原文 ·
@inproceedings{paperbot5642,
title = {Gap between theory and practice},
author = {Sungjae Hwang and Sukyoung Ryu},
booktitle = {ICSE},
year = {2020},
doi = {10.1145/3377811.3380424}
}