Characterizing the cost of introducing secure programming patterns and practices in Ethereum

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

3 Citations (Scopus)
81 Downloads (Pure)

Abstract

Ethereum is blockchain-based platform which enables the development and deployment of smart contracts. Smart contracts are computer programs that provide automation for the governance of decentralized autonomous organizations (DAO). However, while the Blockchain technology is secure, smart contracts are only as secure as the programmers has designed it to be. Therefore, smart contract exposes vulnerabilities that can be exploited by attackers and threaten the viability of the DAOs. This study presents a case study which investigated how security programming patterns and practices from other programming languages can be applied in Solidity – Ethereum programming language. We have characterized the cost of introducing these patterns and practices. We identified 30 security programming patterns and practices from C++, JAVA which can be applicable to Solidity and implemented ten in a representative smart contract. The results show that the application of the ten security patterns and practices identified and implemented increases the cost of the smart contract (when compared to the baseline). Furthermore, we argue that this difference is not significant and should not deter any programmers into introducing the security patterns and practices into their smart contracts.
Original languageEnglish
Title of host publicationWorldCist'20 - 8th World Conference on Information Systems and Technologies
EditorsÁlvaro Rocha, Hojjat Adeli, Luís Paulo Reis, Sandra Costanzo, Irena Orovic, Fernando Moreira
PublisherSpringer
Pages25-34
Number of pages10
ISBN (Electronic)9783030456917
ISBN (Print)9783030456900
DOIs
Publication statusPublished - 8 Jun 2020
Event8th World Conference on Information Systems and Technologies - Budva, Montenegro
Duration: 7 Apr 202010 Apr 2020
http://worldcist.org/

Publication series

NameAISC Series (Advances in Intelligent Systems and Computing)
PublisherSpringer
Volume1160
ISSN (Print)2194-5357

Conference

Conference8th World Conference on Information Systems and Technologies
Abbreviated titleWorldCist'20
Country/TerritoryMontenegro
CityBudva
Period7/04/2010/04/20
Internet address

Keywords

  • secure programming
  • blockchain
  • ethereum
  • smart contract

Fingerprint

Dive into the research topics of 'Characterizing the cost of introducing secure programming patterns and practices in Ethereum'. Together they form a unique fingerprint.

Cite this