Full Text Available
Note: Clicking the button above will open the full text document at the original institutional repository in a new window.
Thesis (MSc)--Stellenbosch University, 2020.
| Main Author: | |
|---|---|
| Other Authors: | |
| Format: | Thesis |
| Language: | en_ZA |
| Published: |
Stellenbosch : Stellenbosch University.
2020
|
| Subjects: | |
| Tags: |
No Tags, Be the first to tag this record!
|
| _version_ | 1867613894766231552 |
|---|---|
| access_status_str | Open Access |
| author | Leid, Alexander |
| author2 | Van der Merwe, Andries Brink |
| author_browse | Leid, Alexander Van der Merwe, Andries Brink |
| author_facet | Van der Merwe, Andries Brink Leid, Alexander |
| author_sort | Leid, Alexander |
| collection | Thesis |
| dc_rights_str_mv | Stellenbosch University. |
| description | Thesis (MSc)--Stellenbosch University, 2020. |
| format | Thesis |
| id | oai:scholar.sun.ac.za:10019.1/108088 |
| institution | Stellenbosch University (South Africa) |
| language | en_ZA |
| last_indexed | 2026-06-10T12:43:24.214Z |
| license_str | Other — see source repository |
| provenance_str_mv | Harvested via OAI-PMH from SUNScholar — Stellenbosch University Repository |
| publishDate | 2020 |
| publishDateRange | 2020 |
| publishDateSort | 2020 |
| publisher | Stellenbosch : Stellenbosch University. |
| publisherStr | Stellenbosch : Stellenbosch University. |
| record_format | dspace |
| source_str | SUNScholar — Stellenbosch University Repository |
| spelling | oai:scholar.sun.ac.za:10019.1/108088 Testing smart contracts Leid, Alexander Van der Merwe, Andries Brink Visser, Willem Stellenbosch University. Faculty of Science. Dept. of Mathematical Sciences. Division Computer Science. Smart contracts -- Auditing Security analysis Exploitation Fuzzy expert systems Ethereum UCTD Thesis (MSc)--Stellenbosch University, 2020. ENGLISH ABSTRACT: There have been several high-profile exploits of smart contracts running on the Ethereum Virtual Machine (EVM) over the last few years since the release of Ethereum. Many of these exploits were introduced via programmer error and could be avoided by proper auditing beforehand. Security analysis tooling has advanced in this space to aid developers and auditors to automatically find these exploits and in some cases generate test input that can recreate the exploit. In this work, we review the most critical vulnerabilities currently present in the EVM ecosystem and provide best practices and forms of prevention. Taxonomies (new and existing) are presented to categorise the type of smart contract exploits present at the application layer and compare them to similar exploits in imperative programs. Automated testing tools are investigated and extended in areas where they may struggle to detect certain vulnerabilities and to synthesise adversarial smart contracts. Lastly, some of the most popular and actively developed automated testing tools are catalogued, evaluated, and benchmarked. Masters 2020-02-24T09:35:14Z 2020-04-28T12:18:33Z 2020-02-24T09:35:14Z 2020-04-28T12:18:33Z 2020-03 Thesis http://hdl.handle.net/10019.1/108088 en_ZA Stellenbosch University. ix, 102 pages application/pdf Stellenbosch : Stellenbosch University. |
| spellingShingle | Smart contracts -- Auditing Security analysis Exploitation Fuzzy expert systems Ethereum UCTD Leid, Alexander Testing smart contracts |
| title | Testing smart contracts |
| title_full | Testing smart contracts |
| title_fullStr | Testing smart contracts |
| title_full_unstemmed | Testing smart contracts |
| title_short | Testing smart contracts |
| title_sort | testing smart contracts |
| topic | Smart contracts -- Auditing Security analysis Exploitation Fuzzy expert systems Ethereum UCTD |
| url | http://hdl.handle.net/10019.1/108088 |
| work_keys_str_mv | AT leidalexander testingsmartcontracts |