Tainting in Smart Contracts: Combining Static and Runtime Verification

Azzopardi, Shaun; Ellul, Joshua; Falzon, Ryan; Pace, Gordon J.

doi:10.1007/978-3-031-17196-3_8

Cited by 2 publications

(3 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The integration of formal veriőcation techniques, such as model checking and theorem proving or symbolic execution [10,16,25,35], has broadened the capabilities of runtime veriőcation by enabling the analysis of detailed system properties and complex temporal behaviors, thereby facilitating the veriőcation of critical systems operating under rigorous safety and security constraints.…”

Section: Formal Verification Techniquesmentioning

confidence: 99%

“…CLawK [31] takes a different approach by automatically generating monitors for smart contracts from declarative business process speciőcations using dynamic condition response (DCR) graphs, and Smart contract Runtime Protection (SRP) [4] presents a hybrid runtime protection framework that employs a proactive and dynamic runtime veriőcation technique for continuous monitoring of smart contract execution in realtime. [10] proposes a two-fold veriőcation process that involves monitoring the smart contract's execution in real-time and tracking data ŕow to sensitive operations. [38] proposes a generalized runtime veriőcation technique based on metric temporal logic (MTL) for monitoring the execution of smart contracts on multiple blockchains.…”

Section: Blockchains and Runtime Verificationmentioning

confidence: 99%

“…To 9 generate the JML specs, the language has to be changed to JavaJML and another path (usually inside a specs/ subdirectory) should be selected for the .jml őles. The resulting code for the Warehouse class can be seen in őgures 10 and 11 10 . The relevant part of the Customer class is where the foreign key is set, which can be seen in Figure 12.…”

Section: Using the Code Generatormentioning

confidence: 99%

See 2 more Smart Citations

Practical runtime verification of cross-organizational smart contracts

Kangogo,

Péter,

Klenik

et al. 2024

Preprint

View full text Add to dashboard Cite

Smart contracts in blockchains often implement critical functionality; consequently, their development time software fault detection, removal, and avoidance have been the target of intensive research. However, the applicability of runtime dependability mechanisms to smart contracts has not been explored systematically, mainly due to the transaction pricing models of public blockchains. In this paper, we propose a novel and practical runtime verification approach for Hyperledger Fabric, the leading cross-organizational blockchain platform, as an error detection facility for fault tolerance mechanisms; building on the proposition that, in contrast to the public setting, cross-organizational blockchains have ample computational headroom for their systematic use. We introduce a smart contract entity framework architecture with reusable domain models and encapsulated runtime verification. We describe Hypernate, our open-source implementation of the approach for Java smart contracts, which uses the Java Modelling Language for requirement specification and integrates the OpenJML verification tool. We demonstrate and evaluate the approach on a Fabric implementation of the TPC-C benchmark.

show abstract

Section: Formal Verification Techniquesmentioning

confidence: 99%