论文标题
eosfuzzer：漏洞检测EOSIO智能合约
EOSFuzzer: Fuzzing EOSIO Smart Contracts for Vulnerability Detection
论文作者
论文摘要
EOSIO是一个典型的公共区块链平台。从交易速度方面，它具有可扩展性，并且具有越来越多的生态系统支持智能合约和分散应用程序。但是，EOSIO智能合约中的漏洞导致了严重的攻击，这给最终用户带来了严重的财务损失。在这项工作中，我们系统地分析了三个典型的EOSIO智能合同漏洞及其相关攻击。然后，我们提出了Eosfuzzer，这是一个通用的黑框构图框架，可检测EOSIO智能合约中的漏洞。特别是，Eosfuzzer提出了有效的攻击方案和测试魔术智能合同模糊的测试。我们对3963个EOSIO智能合约的模糊实验表明，Eosfuzzer既有效又有效地检测EOSIO SMART合同脆弱性，以高准确性。
EOSIO is one typical public blockchain platform. It is scalable in terms of transaction speeds and has a growing ecosystem supporting smart contracts and decentralized applications. However, the vulnerabilities within the EOSIO smart contracts have led to serious attacks, which caused serious financial loss to its end users. In this work, we systematically analyzed three typical EOSIO smart contract vulnerabilities and their related attacks. Then we presented EOSFuzzer, a general black-box fuzzing framework to detect vulnerabilities within EOSIO smart contracts. In particular, EOSFuzzer proposed effective attacking scenarios and test oracles for EOSIO smart contract fuzzing. Our fuzzing experiment on 3963 EOSIO smart contracts shows that EOSFuzzer is both effective and efficient to detect EOSIO smart contract vulnerabilities with high accuracy.
