摘要
基于智能合约的数据交易有效克服了传统交易中的中心化、单点故障以及交易不透明等问题,显著提升了交易效率。然而,贯穿交易全程的智能合约由于其核心地位也面临着许多潜在威胁。概述了数据交易流程及合约漏洞现有的检测方法,接着按照数据交易中数据拥有者、数据请求者以及数据交易平台三个实体的交互关系对合约的漏洞重新分类;依据工具的作用,将工具分为智能合约漏洞检测工具和智能合约漏洞修复工具并从语言支持、平台兼容以及工具性能三方面对工具进行了对比分析。最后,总结了目前数据交易中智能合约面临的问题并对未来的研究方向提出展望。
Data transactions based on smart contracts effectively overcome the problems of centralization,single point of failure and transaction opacity in traditional transactions,and significantly improve transaction efficiency.However,smart contracts throughout the transaction process also face a number of potential threats due to their central position.Firstly,this paper outlines the data transaction process and existing detection methods of contract vulnerabilities,and then reclassifies contract vulnerabilities according to the interaction between the three entities of data owner,data requester and data trading platform in data transactions.The tools are divided into smart contract vulnerability detection tools and smart contract vulnerability repair tools,and the tools are compared and analyzed from the aspects of language support,platform compatibility and tool performance.Finally,the paper summarizes the current problems faced by smart contracts in data transactions and puts forward the prospect of future research directions.
作者
李雯洁
李雷孝
刘东江
杜金泽
林浩
LIWenjie;LI Leixiao;LIU Dongjiang;DU Jinze;LIN Hao(College of Data Science and Application,Inner Mongolia University of Technology,Hohhot 010080,China;Key Laboratory of Cyberspace Security in Northern Xinjiang,InnerMongoliaAutonomous Region,Hohhot 010080,China;Inner Mongolia Autonomous Region Software Service Engineering Technology Research Center Based on Big Data,Hohhot 010080,China;College of Computer Science and Engineering,Tianjin University of Technology,Tianjin 300384,China)
出处
《计算机工程与应用》
北大核心
2025年第9期1-24,共24页
Computer Engineering and Applications
基金
国家自然科学基金(62362055)
内蒙古自治区重点研发与成果转化计划项目(2022YFSJ0013,2023YFHH0052)
内蒙古自治区高等学校青年科技英才支持计划项目(NJYT22084,NJYT24035)
内蒙古自然科学基金(2023MS06008)
内蒙古自治区直属高校科研项目(JY20220061,JY20230119,JY20230019)
鄂尔多斯市重点研发计划项目(YF20232328)
国家重点研发项目(2023YFB2703900)。
关键词
数据交易
智能合约安全
漏洞检测
漏洞修复
data transaction
smart contract security
vulnerability detection
vulnerability repair
