A Dynamic Taint Analysis-Based Smart Contract Testing Approach

Hui Zhao, Xing Li, Keke Gai*

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Due to the unique global state and transaction sequence characteristics of smart contracts, the detection method based on a single test case cannot improve the vulnerability detection rate during contract detection. The current contract testing methods based on genetic algorithms have not yet solved the problems caused by these characteristics. Therefore, we propose an adaptive fuzzing method based on dynamic taint analysis and genetic algorithm, SDTGfuzzer. SDTGfuzzer focuses on dynamic taint analysis to collect runtime information as feedback, and focuses on solving the challenges brought by global variables and transaction sequences for contract testing. Genetic Algorithms work well in test case generation for fuzzing. Therefore, SDTGfuzzer optimizes the genetic algorithm based on an efficient and lightweight multi-objective adaptive strategy, focusing on solving the problem that the contract constraints cannot be covered due to the global state. Experimental results show that our method has a higher vulnerability detection rate than other tools for detecting contract vulnerabilities.

Original languageEnglish
Title of host publicationSmart Computing and Communication - 7th International Conference, SmartCom 2022, Proceedings
EditorsMeikang Qiu, Zhihui Lu, Cheng Zhang
PublisherSpringer Science and Business Media Deutschland GmbH
Pages403-413
Number of pages11
ISBN (Print)9783031281235
DOIs
Publication statusPublished - 2023
Event7th International Conference on Smart Computing and Communication, SmartCom 2022 - New York, United States
Duration: 18 Nov 202220 Nov 2022

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume13828 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference7th International Conference on Smart Computing and Communication, SmartCom 2022
Country/TerritoryUnited States
CityNew York
Period18/11/2220/11/22

Keywords

  • Fuzzing
  • Genetic Algorithms
  • Smart Contracts
  • Taint Analysis
  • Vulnerability Detection

Fingerprint

Dive into the research topics of 'A Dynamic Taint Analysis-Based Smart Contract Testing Approach'. Together they form a unique fingerprint.

Cite this