Access Control Modeling and Validation for Ethereum Smart Contracts

Abstract

ABSTRACT Smart contracts are self‐executing programs that operate on a blockchain network. They are designed to automate transaction execution without the need for intermediaries. Once deployed in the blockchain network, smart contracts cannot be altered. However, this immutability can also lead to security risks. If a smart contract contains a vulnerability upon deployment, it cannot be corrected, leaving the code vulnerable. Therefore, incorporating security considerations during the design phase of smart contract development is crucial. Access control is a key security concept that must be integrated into the design of smart contracts to prevent unauthorized access to critical functions or data. In this paper, we introduce a Model‐Driven Architecture (MDA) approach to design access control for smart contracts, and we validate, using Ethereum, the proposed approach using Smart Contract Security Verification Standard (SCSVS) rules.