Smart contracts manage valuable assets, and their immutability hinders bug fixing. Therefore, pre-deployment verification and validation are critical. In fact, auditing has become mandatory in the pipeline of smart contract development. Auditors usually combine manual inspection with automated tools in their auditing work, looking for issues that may be domain dependent (i.e., pertaining to the correct implementation of requirements—which are often informal, partial, and implicit) or independent (e.g., reentrancy, overflow, etc.). To identify domain dependent issues, it is important to understand the non-trivial behavior of the implementation over sequences of calls made by callees playing different roles in the contract. In this paper, we propose a novel approach that combines predicate abstraction with modal transition systems to build abstractions that can help auditors in the smart contract validation process. The proposed technique does not require auditors to do formal modeling to specify the model. The required inputs are a set of predicates provided as code and, optionally, constraints over smart contract function parameters. The output is a modal transition system that captures the contract’s behavior. We report on a prototype that builds modal abstractions and an evaluation on two established benchmarks where we identified four previously unreported issues.
Thu 9 OctDisplayed time zone: Eastern Time (US & Canada) change
11:00 - 12:30 | Session 7: Security, Validation, and Smart ContractsJournal-First / Research Papers at DCIH 507 Chair(s): Daniel Varro Linköping University / McGill University Hybrid | ||
11:00 18mTalk | Modal Abstractions for Smart Contract Validation Research Papers Javier Godoy Departamento de Computacion. FCEyN. UBA, Margarita Capretto IMDEA Software Institute and Universidad Politécnica de Madrid, Martin Ceresa Input Output -- IMDEA Software Institute, Juan Pablo Galeotti Universidad de Buenos Aires, Diego Garbervetsky Universidad de Buenos Aires, César Sánchez IMDEA Software Institute, Sebastian Uchitel Universidad de Buenos Aires / Imperial College | ||
11:18 18mTalk | Mining Frequent Structures in Conceptual Models Journal-First Mattia Fumagalli Free University of Bozen-Bolzano, Tiago Prince Sales University of Twente, Pedro Paulo Barcelos , Giovanni Micale , Philipp-Lorenz Glaser Business Informatics Group, TU Wien, Dominik Bork TU Wien, Vadim Zaytsev University of Twente, Diego Calvanese , Giancarlo Guizzardi Universiteit Twente DOI | ||
11:36 18mTalk | Visual Modeling and Simulation of AUTOSAR Application Layer Models Using Modelica Research Papers Peihao Yang Harbin Institute of Technology; Zhengzhou Research Institude, Harbin Institute of Technology, Tiantian Wang Harbin Institute of Technology, Ming Yang Harbin Institute of Technology, Xiaohong Su Harbin Institute of Technology | ||
11:54 18mTalk | Diagrammatic physical robot models Journal-First Alvaro Miyazawa , Sharar Ahmadi , Ana Cavalcanti University of York, James Baxter , Mark Post , Pedro Ribeiro University of York, UK, Jon Timmis , Thomas Wright DOI | ||
12:12 18mTalk | How fair are we? From conceptualization to automated assessment of fairness definitions Journal-First Giordano d'Aloisio University of L'Aquila, Claudio Di Sipio University of L'Aquila, Antinisca Di Marco University of L'Aquila, Davide Di Ruscio University of L'Aquila DOI | ||