Abstract
Ethereum is blockchain-based platform which enables the development and deployment of smart contracts. Smart contracts are computer programs that provide automation for the governance of decentralized autonomous organizations (DAO). However, while the Blockchain technology is secure, smart contracts are only as secure as the programmers has designed it to be. Therefore, smart contract exposes vulnerabilities that can be exploited by attackers and threaten the viability of the DAOs. This study presents a case study which investigated how security programming patterns and practices from other programming languages can be applied in Solidity – Ethereum programming language. We have characterized the cost of introducing these patterns and practices. We identified 30 security programming patterns and practices from C++, JAVA which can be applicable to Solidity and implemented ten in a representative smart contract. The results show that the application of the ten security patterns and practices identified and implemented increases the cost of the smart contract (when compared to the baseline). Furthermore, we argue that this difference is not significant and should not deter any programmers into introducing the security patterns and practices into their smart contracts.
Original language | English |
---|---|
Title of host publication | WorldCist'20 - 8th World Conference on Information Systems and Technologies |
Editors | Álvaro Rocha, Hojjat Adeli, Luís Paulo Reis, Sandra Costanzo, Irena Orovic, Fernando Moreira |
Publisher | Springer |
Pages | 25-34 |
Number of pages | 10 |
ISBN (Electronic) | 9783030456917 |
ISBN (Print) | 9783030456900 |
DOIs | |
Publication status | Published - 8 Jun 2020 |
Event | 8th World Conference on Information Systems and Technologies - Budva, Montenegro Duration: 7 Apr 2020 → 10 Apr 2020 http://worldcist.org/ |
Publication series
Name | AISC Series (Advances in Intelligent Systems and Computing) |
---|---|
Publisher | Springer |
Volume | 1160 |
ISSN (Print) | 2194-5357 |
Conference
Conference | 8th World Conference on Information Systems and Technologies |
---|---|
Abbreviated title | WorldCist'20 |
Country/Territory | Montenegro |
City | Budva |
Period | 7/04/20 → 10/04/20 |
Internet address |
Keywords
- secure programming
- blockchain
- ethereum
- smart contract