Smart contract security Papers---智能合约安全论文

[JNCA'20]FSFC: An input filter-based secure framework for smart contract 链接：https://authors.elsevier.com/c/1aRzo3sf~y5KuF[ICSE'20]sFuzz: An Efficient Adaptive Fuzzer for Solidity Smart Contracts...

JocelyHigher

8007人浏览 · 2018-12-30 11:58:55

JocelyHigher · 2018-12-30 11:58:55 发布

友情提示：原创博客，禁止转载，谢谢配合

SP2023_Clockwork Finance: Automated Analysis of Economic Security in Smart Contracts
NDSS2023_POSE: Practical Off-chain Smart Contract Execution
NDSS2023_Smarter Contracts: Detecting Vulnerabilities in Smart Contracts with Deep Transfer Learning
Security2023_Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract
Security2023_Smart Learning to Find Dumb Contracts
Security2023_Confusum Contractum: Confused Deputy Vulnerabilities in Ethereum Smart Contracts
Security2023_Panda: Security Analysis of Algorand Smart Contracts
Security2023_Proxy Hunting: Understanding and Characterizing Proxy-based Upgradeable Smart Contracts in Blockchains
ICSE2023_Turn the Rudder: A Beacon of Reentrancy Detection for Smart Contracts on Ethereum
ICSE2023_Demystifying Exploitable Bugs in Smart Contracts
ICSE2023_AChecker: Statically Detecting Smart Contract Access Control Vulnerabilities
ISSTA2023_ItyFuzz: Snapshot-Based Fuzzer for Smart Contract
ISSTA2023_Definition and Detection of Defects in NFT Smart Contracts
ISSTA2023_iSyn: Semi-automated Smart Contract Synthesis from Legal Financial Agreements
ISSTA2023_SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis
ISSTA2023_Beyond "Protected" and "Private": An Empirical Security Analysis of Custom Function Modifiers in Smart Contracts
ISSTA2023_Automated Generation of Security-Centric Descriptions for Smart Contract Bytecode
ISSTA2023_Toward Automated Detecting Unanticipated Price Feed in Smart Contract
TSE2023_Demystifying Random Number in Ethereum Smart Contract: Taxonomy, Vulnerability Identification, and Attack Detection
TSE2023_Combatting Front-Running in Smart Contracts: Attack Mining, Benchmark Construction and Vulnerability Detector Evaluation
TIFS2023_Rethinking Smart Contract Fuzzing: Fuzzing With Invocation Ordering and Important Branch Revisiting
Security2023_Confusum Contractum:Confused Deputy Vulnerabilities in Ethereum Smart Contracts
TR2023_Detect Defects of Solidity Smart Contract Based on the Knowledge Graph
Security2021_evil under the sun: Understanding and discovering attacks on ethereum decentralized applications
SANER2023_Security Code Recommendations for Smart Contract
TR2022_Detect Defects of Solidity Smart Contract Based on the Knowledge Graph
TDSC2023_ExGen: Cross-platform, Automated Exploit Generation for Smart Contrac Vulnerabilities
[CCS'22]Towards Automated Safety Vetting of Smart Contracts in Decentralized Applications
[ICSE'22]Utilizing Parallelism in Smart Contracts on Decentralized Blockchains by Taming Application-Inherent Conflicts
[RAID'22]Elysium- Context-Aware Bytecode-Level Patching to Automatically Heal Vulnerable Smart Contracts
[ISSTA'22]WASAI: uncovering vulnerabilities in Wasm smart contracts
[ISSTA'22]Finding permission bugs in smart contracts with role mining
[ISSTA'22]eTainter: detecting gas-related vulnerabilities in smart contracts
[ISSTA'22]Park: accelerating smart contract vulnerability detection via parallel-fork symbolic execution
[ISSTA'22]SmartDagger: a bytecode-based static analysis approach for detecting cross-contract vulnerability.
[FSE'22]SolSEE: A Source-Level Symbolic Execution Engine for Solidity
[ASE'22]Identifying Solidity Smart Contract API Documentation Errors
[ASE'22]Property-Based Automated Repair of DeFi Protocols
[ASE'22]nvCon: A Dynamic Invariant Detector for Ethereum Smart Contracts
[SP'21]Compositional Security for Reentrant Applications
[SP'21]SmartPulse - Automated Checking of Temporal Properties in Smart Contracts
[SP'21]SGUARD - Smart Contracts Made Vulnerability-Free
[NDSS'21]As Strong As Its Weakest Link - How to Break Blockchain DApps at RPC Service
[NDSS'21]Bitcontracts: Supporting Smart Contracts in Legacy Blockchains
[security'21] Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited
[Security'21] EVMPatch Timely and Automated patch of ethereum smart contracts
[Security'21] EOSAFE：Security Analysis of EOSIO Smart Contracts
[security'21]Evil Under the Sun - Understanding and Discovering Attacks on Ethereum Decentralized Applications
[Security'21]SmarTest - Effectively Hunting Vulnerable Transaction Sequences in Smart Contracts through Language Model-Guided Symbolic Execution
[ICSE'21]BLOCKEYE: Hunting For DeFi Attacks on Blockchain
[ICSE'21]Smart Contract Security: a Practitioners' Perspective
[ASE'21]Automating User Notice Generation for Smart Contract Functions
[ASE'21]Characterizing Transaction-Reverting Statements in Ethereum Smart Contracts
[ATC'21]An Off-The-Chain Execution Environment for for Scalable Testing and Profiling of Smart Contracts
[ESC/FSE'21]Towards automated verification of smart contract fairness
[ESC/FSE'2021]ÐArcher -detecting on-chain-off-chain synchronization bugs in decentralized applications
[ESC/FSE'2021]Making smart contract development more secure and easier( 基于补丁和安全标准推荐合约安全增强建议并验证)
[ICDCS'21]Blockumulus - A Scalable Framework for Smart Contracts on the Cloud
[ISSRE'21]Peculiar: Smart Contract Vulnerability Detection Based on Crucial Data Flow Graph and Pre-training Techniques
[TSE'21]Aroc: An Automatic Repair Framework for On-chain Smart Contracts
[TKDE'21]Combining_Graph_Neural_Networks_with_Expert_Knowledge_for_Smart_Contract_Vulnerability_Detection
[TPDS'21]Parallel_and_Asynchronous_Smart_Contract_Execution
[InfoCom'21]Code is the (F)Law- Demystifying and Mitigating Blockchain Inconsistency Attacks Caused by Software Bugs
[ASIA CCS ’21]Targeting the Weakest Link - Social Engineering Attacks in Ethereum Smart Contracts
[Saner'21]Analysis of Source Code Duplication in Ethreum Smart Contracts
[Euro&SP'21]CONFUZZIUS: A Data Dependency-Aware Hybrid Fuzzer for Smart Contract
[EASE'21]HFContractFuzzer Fuzzing Hyperledger Fabric Smart Contracts for Vulnerability Detection
[CCS'20]ACE: ASYnchronous and Concurrent Execution of Complex smart contracts
[CCS'20] eThor: Practical and Provably Sound static Analysis of Ethereum Smart contracts
[IJCAI'20]Smart Contract Vulnerability Detection Using Graph Neural Networks
[ASE'20] Demystifying Loops in Smart Contracts
[ASE'20]Summary-Based Symbolic Evaluation for Smart Contracts
[ISSTA'20]Echidna Eﬀective, Usable,and Fast Fuzzing for Smart Contracts
[ISSTA'20]How Eﬀective Are Smart Contract Analysis Tools? Evaluating Smart Contract Static Analysis Tools using Bug Injection
[DSN'20]SMACS Smart Contract Access Control Service
[DSN'20]Smart Contracts on the Move
[PLDI'20]Ethainter a smart contract security analyzer for composite vulnerabilities
[PLDI'20]Securing smart contract with runtime validation
[arxive'20]EthScope A Transaction-centric Security Analytics Framework
[Arxive'20]eThor Practical and Provably Sound Static Analysis
[SANER'20]SMARTSHIELD Automatic Smart Contract Protection Made Easy
[SANER'20]ETHPLOIT From Fuzzing to Efficient Exploit generation against smart contracts
[SP'20]VeriSmart： A Highly Precise Safety Verifier for Ethereum Smart Contracts
[SP'20]VerX：Safety Verification of Smart Contracts
[SP'20]Semantic Understanding of Smart Contracts: Executable Operational Semantics
[NDSS'20]SODA: A Generic Online Detection Framework for Smart Contracts
[NDSS'20]Broken Metre:Attacking Resource Metering in EVM
[Security'20]An Ever-evolving Game - Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem
[Security'20]ETHBMC: A Bounded Model Checker for Smart Contracts
[Security'20]TXSPECTOR: Uncovering Attacks in Ethereum from Transactions
[JNCA'20]FSFC: An input filter-based secure framework for smart contract
[ICSE'20]sFuzz: An Efficient Adaptive Fuzzer for Solidity Smart Contracts
[TSC'20]ContractGuard Defend Ethereum Smart contracts with Embedded Intrusion Detection
[TSE'20]Smart Contract Development: Challenges and Opportunities
[FSE'20]HARVEY： A Greybox Fuzzer for Smart Contracts
[FSE'20] Towards Automated Verification of Smart Contract Fairness
[FSE'20]ModCon- A Model-Based Testing Platform for Smart Contracts
[ICSE'20]Targeted Greybox Fuzzing with Static Lookahead Analysis
[ICSE'20]Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts
[ICSE'20]Gap between Theory and Practice : An Empirical Study of Security Patches in Solidity
[ICSE'20]Seraph: Enabling Cross-Platform Security Analysis For EVM and WASM Smart Contracts
[APSEC'19]SIF A Framework for Solidity Contract Instrumentation and Analysis
[APSEC'19]SolAnalyser A Framework for Analysing and Testing Smart contract
[VSTTE'19]solc-verify：A Modular Verifier for Solidity SC
[Arxive]SmartEmbed： A Tool for Clone and Bug Detection in Smart Contracts through Structural Code Embedding
[CCS'19]HyperService：Interoperability and Programmability Across Heterogeneous Blockchains
[CCS'19]Learning to Fuzz from Symbolic Execution with Application to Smart contracts
[CCS'19]TokenScope Automatically Detecting Inconsistent Behaviors of Cryptocurrency Tokens in Ethereum
[NDSS'19]Sereum：Protecting Existing Smart Contracts Against Re-Entrancy Attacks
[ICDCS'19]Read-Uncommitted Transactions for SC performance
[ICPC'19]Enabling Clone Detection For Ethereum via smart contract Birthmarks
[ICPC'19]Towards Automated Testing of Blockchain-based Decentralized Application
[RAID'19]Towards a First Step to Understand the Cryptocurrency Stealing Attack on Ethereum
[IWBOSE'19]Potential Risks of Hyperledger Fabric Smart contracts
[SANER'19]Towards Generating Cost-Effective Test-Suite for Ethereum Smart contract
[SANER'19]EVM：From Offline Detection to Online Reinforcement for Ethereum Virtual Machine
[ESEM'19]A Large-Scale Empirical Study on Control Flow Identification of Smart Contracts
[ISSTA'19]Exploiting the Laws of Order in Smart Contracts
[ISSTA'19]SAFEVM：A Sfety Verifier for Ethereum Smart contracts
EVMFuzz：Differential fuzz testing of Ethereum Virtual Machine
[IEEE transaction on SMC:systems]blockchain-enabled smart contracts: Architecture,applications, and future trends
[PDP'19]Blockchain-Enabled Smart Contracts： Architecture, Applications, and Future Trends
[security'19]The Art of The Scam： Demystifying Honeypots in Ethereum smart contracts
[raid'19]Towards a First Step to Understand the Cryptocurrency Stealing Attack on Ethereum
[Arxive'19'2]Precise Attack Synthesis for Smart Contracts
[ICSE'19]EASYFLOW：Keep Ethereum Away From Overflow [shortpaper]
[Arxive'19]Mutation Testing for Ethereum Smart Contract
[PACMPL'18]Online detection of effectively callback Free Objects with Applications to Smart Contract
[NDSS'18]Chainspace_A Sharded Smart Contracts Platform
[NDSS'18]ZEUS_Analyzing Safety of Smart Contracts
[ACSAC'18 ]Osiris Hunting for Integer Bugs in Ethereum Smart Contracts
[ICSE'18]Towards Saving Money in Using Smart Contracts
[ISPEC'17-bestpaper]An Adaptive Gas Cost Mechanism for Ethereum to Defend Against Under-Priced DoS Attacks
[OOPSLA'18]MadMax-surviving out-of-gas conditions in Ethereum smart contracts
[ACSAC'18]Finding The Greedy, Prodigal, and Suicidal Contracts at Scale
[ASE'18]ContractFuzzer： fuzzing smart contracts for vulnerability detection
[Arxive'18]Towards Safer Smart Contracts：A Sequence Learning Approach to Detecting Vulnerabilities
[ICSE'18]ReGuard：Finding Reentrancy Bugs in smart contracts [shortpaper]
[ASE'18]S-Gram：Towards Semantic-Aware security auditing for Ethereum Smart Contract [shortpaper]
[ESEC-FSE'18]EClone：Detect Semantic Clones in Ethereum via Symbolic Transaction Sketch [shortpaper]
[IMC'18]Analyzing Ethereum’s Contract Topology
[SECURITY'18]teEther-Gnawing at Ethereum to Automatically Exploit Smart Contracts
[SECURITY'18]Enter the Hydra-Towards Principled Bug Bounties and Exploit-Resistant Smart Contracts
[SECURITY'18]Arbitrum: Scalable Ethereum's Opaque Smart Contracts
[CCS'18]Securify： Practical Security Analysis of Smart Contracts
[WETSEB'18]SmartCheck：static analysis of ethereum smart contracts
[CCS'18]BitML： a calculus for Bitcoin smart contracts
[archive'18]Smart Contracts for Bribing Miners
[Euro S&P'18]Ekiden-A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contract Execution
[archive'18]Blockchain and Trusted Computing Problems, Pitfalls, and a Solution for Hyperledger Fabric
[ARXIVE'18]Vandal： A Scalable Security Analysis Framework for smart contracts
[ARXIVE'19]sCompile：Critical Path Identification and Analysis for smart contracts
[Arxive]SmartEmbed： A Tool for Clone and Bug Detection in Smart Contracts through Structural Code Embedding
[PODC'17]FruitChains: A Fair Blockchain
[POST'17]A survey of attacks on Ethereum smart contracts
[master thesis'17]Ethereum Smart Contracts_Security vulnerabilities and security Tools
[SP'16]Hawk-The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts
[CCS'16]Making Smart Contracts Smarter
[CCS'16]The ring of gyges_Investigating the Future of Criminal smart contracts
[FC'16]Step by Step Towards Creating a Safe Smart Contract： Lessons and Insights from a Cryptocurrency Lab
[CCS'15]Demystifying incentives in the concesnsus computer