一句话：针对智能合约开发安全辅助不足，旨在让合约编写更安全、更易用。
随着分布式应用快速发展，智能合约受到越来越多开发者关注。但开发者或领域专家对 Solidity 等特定编程语言的熟悉程度不一，代码中隐藏的漏洞可能被利用并造成巨大财产损失。现有辅助工具缺乏安全考量，大多只提供基于模糊搜索的词补全和有限类型漏洞的检测服务，导致编码过程中的人力浪费以及部署后的潜在漏洞威胁。本文旨在使智能合约开发更加安全和容易，但摘要未给出具体方法、关键技术或实验评估结果。
With the rapid development of distributed applications, smart contracts have attracted more and more developers' attentions. However, developers or domain experts have different levels of familiarity with specific programming languages, like Solidity, and those vulnerabilities hidden in the code would be exploited and result in huge property losses. Existing auxiliary tools lack security considerations. Most of them only provide word completion based on fuzzy search and detection services for limited types of vulnerabilities, which results in the manpower waste during coding and potential vulnerability threats after deployment.
DOI 原文 ·
@inproceedings{paperbot6314,
title = {Making smart contract development more secure and easier},
author = {Meng Ren and Fuchen Ma and Zijing Yin and Ying Fu and Huizhong Li and Wanli Chang and Yu Jiang},
booktitle = {FSE},
year = {2021},
doi = {10.1145/3468264.3473929}
}