论文标题
以太坊智能合约开发的安全清单：模式和最佳实践
Security checklists for Ethereum smart contract development: patterns and best practices
论文作者
论文摘要
近年来，由于区块链技术的特性，智能合约和DAPP变得越来越重要和广泛。在大多数情况下，DAPP至关重要，并且应确保非常严格的安全要求。但是，制定安全可靠的智能合约并不是一项琐碎的任务。一些研究人员研究了安全问题，但是这些问题都没有提供一个简单而直观的工具来克服这些问题。在本文中，我们收集了DAPP的安全模式列表。此外，基于这些模式，我们为读者提供安全评估清单，可以轻松用于SC的开发。我们涵盖了软件生命周期的设计，编码以及测试和部署的阶段。这样，我们允许开发人员轻松验证他们是否将所有相关的安全模式应用于智能合约。我们将所有分析集中在最受欢迎的以太坊区块链和坚固的语言上。
In recent years Smart Contracts and DApps are becoming increasingly important and widespread thanks to the properties of blockchain technology. In most cases DApps are business critical, and very strict security requirements should be assured. Developing safe and reliable Smart Contracts, however, is not a trivial task. Several researchers have studied the security issues, however none of these provide a simple and intuitive tool to overcome these problems. In this paper we collected a list of security patterns for DApps. Moreover, based on these patterns, we provide the reader with security assessment checklists that can be easily used for the development of SCs. We cover the phases of design, coding, and testing and deployment of the software lifecycle. In this way, we allow developers to easily verify if they applied all the relevant security patterns to their smart contracts. We focus all the analysis on the most popular Ethereum blockchain, and on the Solidity language.
