一句话：提出面向 Solidity 源码的符号执行引擎 SolSEE，通过保留高层语义提升分析灵活性与工具可用性。
现有智能合约符号执行工具大多在字节码层面进行分析，丢失了源代码中的高层语义信息，导致可视化、调试等交互式分析任务极为困难，并显著限制工具可用性。本文提出 SolSEE，一个面向 Solidity 智能合约的源代码级符号执行引擎。作者描述了 SolSEE 的设计，强调其关键特性，并通过基于 Web 的用户界面展示其用法。与现有源代码级分析工具相比，SolSEE 在支持的 Solidity 高级语言特性和分析灵活性方面具有优势。演示视频可通过给定链接获取。
Most of the existing smart contract symbolic execution tools perform analysis on bytecode, which loses high-level semantic information presented in source code. This makes interactive analysis tasks—such as visualization and debugging—extremely challenging, and significantly limits the tool usability. In this paper, we present SolSEE, a source-level symbolic execution engine for Solidity smart contracts. We describe the design of SolSEE, highlight its key features, and demonstrate its usages through a Web-based user interface. SolSEE demonstrates advantages over other existing source-level analysis tools in the advanced Solidity language features it supports and analysis flexibility. A demonstration video is available at: https://sites.google.com/view/solsee/.
DOI 原文 ·
@inproceedings{paperbot7139,
title = {SolSEE: a source-level symbolic execution engine for solidity},
author = {Shang-Wei Lin and Palina Tolmach and Ye Liu and Yi Li},
booktitle = {FSE},
year = {2022},
doi = {10.1145/3540250.3558923}
}