Follow blockchain research across journals, conferences, and preprint repositories.
500 results · page 17 of 21
M. Kripa, A. Nidhin Mahesh, R. Ramaguru, P. P. Amritha
No abstract is available for this record.
Ahyoung Kim, Mucheol Kim
Blockchain, which started as a cryptocurrency bitcoin, has recently been applied to various fields such as finance, distribution, and public services beyond the category of cryptocurrency. In this paper, we propose a music distribution model to protect music copyrights and rights holders' rights based on blockchain and smart contract technology. By designing and implementing a blockchain-based music distribution model, it organizes music assets into blocks and distributes them among blockchain participating nodes, providing integrity, confidentiality and non-repudiation of assets, and a single point of blockchain advantage. Single Point of Failure (SPOF) problem can be minimized. Blockchain allows musicians to easily approve and manage their music copyright with distributed ledger technology. Rights holders can automatically and immediately receive royalties from the music industry, even if no broker is involved in the distribution process. By distributing and managing music using the proposed model, we can provide all transaction information and related tasks in the music market safely and transparently.
Francesco Bruschi, Vincenzo Rana, Alessio Pagani, Donatella Sciuto
The idea of Smart contracts foresees the possibility of automating contractual clauses using hardware and software tools and devices. One of the main perspectives of their implementation is the automation of interactions such as bets, collaterals, prediction markets, insurances. As blockchain platforms, such as Ethereum, offer very strong guarantees of untampered, deterministic execution, that can be exploited as smart contracts substrate, the problem of how to provide reliable information from the “outside world” into the contracts becomes central. In this article, we propose a system based on a Merkle tree representation of structured documents (such as all XML), with which it is possible to generate compact proofs on the content of web documents. The proofs can then be efficiently checked on-chain by a smart contract, to trigger contract action. We provide an end-to-end proof of concept, applying it to real use case scenarios, which allows us to give an estimate of the costs.
Yu-Jie Jessica Kuo, Jiann‐Cherng Shieh
The blockchain technology designed by information security experts empowers in library service and healthcare service via smart contracts. Advanced blockchain technology provides a mechanism for smart contracts. Through intelligent threshold design and the open and tamper-proof nature of the blockchain, smart contracts have become a new generation of information security technology. In the next-generation library services, traditional borrowing materials from the library have evolved into a limited-time sharing service for electronic materials. These electronic materials have various loan periods and sharing time-varying by different borrower privileges. This study designs a patron-centric account's smart contract to disseminate library information more effectively and collect accurate library data. The smart contract automatically triggers the loan period and extends this mechanism to designing a personal health privacy sharing protocol for improving the one-time authorization sharing mechanism. As a result, this study may provide blockchain smart contract designs shared by library information and healthcare through cross-domain consideration and scheme.
Lodovica Marchesi, Michele Marchesi, Livio Pompianu, Roberto Tonelli
Context: Smart contracts and DApps are becoming increasingly important and widespread. DApps are often business-critical, and strong security guarantees must be ensured. However, developing safe and reliable smart contracts remains a challenging task. Despite growing literature, simple and actionable tools to address security issues are still lacking. Objective: This study identifies design patterns and best practices for DApp security. We categorize them into twelve critical areas based on their security goals and map them to the architecture of decentralized applications. For each item, we define concrete actions to support secure implementation. These are further structured into three security assurance checklists. Method: We analyze existing literature and manually review 224 security items, consolidating duplicates and harmonizing terminology. This process results in 84 unique items, divided into 36 design patterns and 48 best practices, further grouped into 12 categories. We also map the items into three checklists based on the development phase of DApp lifecycle. Finally, for each pattern and practice, we derive 374 actionable security tasks to guide secure development. Results: To the best of our knowledge, this is the most comprehensive and structured collection of DApp security items to date. The proposed framework and checklists help developers ensure the consistent and complete application of secure design principles. Conclusion: Focusing on Ethereum and Solidity, we present a comprehensive framework for improving DApp security. Our work supports ongoing efforts to reduce vulnerabilities in decentralized applications and provides developers with practical tools to build safer, more reliable systems.
Nenad Petrović, Milorad Tošić
Vulnerabilities of smart contract are certainly one of the limiting factors for wider adoption of blockchain technology. Smart contracts written in Solidity language are considered due to common adoption of the Ethereum blockchain platform. Despite its popularity, the semantics of the language is not completely documented and relies on implicit mechanisms not publicly available and as such vulnerable to possible attacks. In addition, creating formal semantics for the higher-level language provides support to verification mechanisms. In this paper, a novel approach to smart contact verification is presented that uses ontologies in order to leverage semantic annotations of the smart contract source code combined with semantic representation of domain-specific aspects. The following aspects of smart contracts, apart from source code are taken into consideration for verification: business logic, domain knowledge, run-time state changes and expert knowledge about vulnerabilities. Main advantages of the proposed verification approach are platform independence and extendability.
Hyun-Ji Chu, Byoungju Choi
최근 블록체인 기반의 소프트웨어가 점차 복잡하고 다양하게 개발되고 있다. 이러한 블록체인 기반 소프트웨어의 기능적 측면에서의 신뢰성을 보장하기 위해 개발 단계에서 엄격한 테스트를 거치도록 요구되고 있으며, 이를 지원하는 다양한 정적 분석 도구 및 동적 테스트 도구가 개발되고 있다. 그러나 전자의 경우엔 실제로 런타임 중에 발생 가능한 잠재적인 문제들을 발견하기 어렵다는 문제가 있으며, 후자의 경우엔 여러 이더리움 계정이 얽힌 통합 테스트의 용도로 활용하기 쉽지 않다는 한계가 있다. 이에 본 연구에서는 테스트 항목을 자동으로 정의하여 테스트 데이터로 만들어주고, 스마트 컨트랙트 개발자가 이를 활용해 스마트 컨트랙트 코드가 설계 모델과 같게 동작하는지 확인할 수 있도록 하는 로그 기반의 이더리움 스마트 컨트랙트 동적 테스트 도구 LESTT를 제안하며, 이더리움 지갑 스마트 컨트랙트 시스템 예제를 통해 그 적용 사례를 보인다.
Patrícia Vilain, John Mylopoulos, Hans‐Arno Jacobsen
In this work, we address the following question: "Which acceptance testing techniques are being used for representing business requirements of smart contracts?" To answer this question we performed a systematic mapping to determine whether acceptance tests for smart contracts and blockchain are being utilized to represent requirements and which acceptance testing techniques are being applied. This systematic mapping shows that, in fact, acceptance testing techniques are still not commonly used to represent the business requirements of smart contracts. We only found two studies using acceptance testing techniques with smart contracts. Moreover, only one of them uses an acceptance testing technique, the BDD (Behavior-Driven Development) notation, to represent the business requirements. In order to confirm that it is possible to represent business requirements of smart contracts, we developed an example that uses the BDD notation to represent requirements of a smart contract deployed in the Hyperledger blockchain. Preliminary results show that it is possible to use acceptance tests to represent business requirements.
Maximilian Wöhrer, Uwe Zdun
The notion to digitally articulate, execute, and enforce agreements with smart contracts has become a feasible reality today. Smart contracts have the potential to vastly improve the efficiency and security of traditional contracts through their self-executing autonomy. To realize smart contracts several blockchain-based ecosystems exist. Today a prominent representative is Ethereum. Its programming language Solidity is used to capture and express contractual clauses in the form of code. However, due to the conceptual discrepancy between contractual clauses and corresponding code, it is hard for domain stakeholders to easily understand contracts, and for developers to write code efficiently without errors. Our research addresses these issues by the design and study of a domain-specific smart contract language based on higher level of abstraction that can be automatically transformed to an implementation. In particular, we propose a clause grammar close to natural language, helpful coding abstractions, and the automatic integration of commonly occurring design patterns during code generation. Through these measures, our approach can reduce the design complexity leading to an increased comprehensibility and reduced error susceptibility. Several implementations of exemplary smart contract scenarios, mostly taken from the Solidity documentation, are used to demonstrate the applicability of our approach.
Nicholas Paul Sheppard
While blockchain technology is best-known for cryptocurrencies, some chains also tout their ability to implement so-called "smart contracts." Ethereum, which bills itself as a "blockchain app platform," defines smart contracts as applications that run exactly as programmed without any possibility of downtime, censorship, fraud or third-party interference (http://www.ethereum.org).
Panos Kudumakis, Thomas Wilmering, M. Sandler, Victor Rodrı́guez-Doncel · 6 authors
The Moving Picture Experts Group (MPEG) is an International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) working group that develops media coding standards. These standards include a set of ontologies for the codification of intellectual property rights (IPR) information related to media. The Media Value Chain Ontology (MVCO) facilitates rights tracking for fair, timely, and transparent payment of royalties by capturing user roles and their permissible actions on a particular IP entity. The Audio Value Chain Ontology (AVCO) extends MVCO functionality related to the description of IP entities in the audio domain, e.g., multitrack audio and time segments. The Media Contract Ontology (MCO) facilitates the conversion of narrative contracts to digital ones. Furthermore, the axioms in these ontologies can drive the execution of rights-related workflows in controlled environments, e.g., blockchains, where transparency and interoperability is favored toward fair trade of music and media. Thus, the aim of this article is to create awareness of the MPEG IPR ontologies developed in the last few years and the work currently taking place addressing the challenge identified toward the execution of such ontologies as smart contracts on blockchain environments.
Venkata Marella, Anoop Vijayan
With the changing landscape of the job market, it is very difficult to secure a job in a company. People manipulate their curriculum vitae with fake information to find a job. Multinational National Companies are investing heavily to verify the background details of the job applicants. But, the background verification process implemented by these companies is extremely costly, time-consuming, and inefficient. To resolve this problem, we present a working prototype of a solution using Design Science Research Methodology where the hash values of all the original documents of a job applicant provided by various organizations are saved on a consortium blockchain. The job applicant’s details can be verified during the hiring process by comparing the hash value of the given document with the hash value of the document present on the blockchain. This process is extremely efficient, less time-consuming, and very cheap to implement for all kinds of companies.
김희민
The use of digital documents is exploding around the world due to the improvement of productivity and the convenience of access and backup of data.Usually, digital documents are managed by a document management system (DMS) which provides access control of the documents with access permission (e.g., password or account).However, when a user who has permission for the documents can directly access the digital document, it can occur a serious security problem.For example, when a malicious attacker gets access permission of a digital document, the document is able to be leaked.In addition, when a user who has authority behaves maliciously for his own benefit, the digital document can be easily falsified by the user.To handle these issues, we propose a new digital document management system for the security of digital documents which distributes the access permissions of the digital document.The proposed system encrypts a digital document with a key and stores the encrypted document into Interplanetary File System(IPFS).In addition, to distribute access permission of the digital document, it manages the key via Shamir's secret sharing scheme and blockchain.We implement our proposed system using Golang on Linux and evaluate the system on local IPFS and Ethereum testnet.The experimental results show that the proposed system provides high security of the digital document with minor performance overhead compared with the existing system.
Joosep Simm, Jamie Steiner, Ahto Truu
No abstract is available for this record.
Nikita Markevich, Ilya I. Livshitz
...
Zehui Yan, Weizhong Qian, Zheng Yang, Weiru Zeng · 6 authors
No abstract is available for this record.
Cheng Shi, Kazuki Yoneyama
Smart contracts are protocols that can automatically execute a transaction including an electronic contract when a condition is satisfied without a trusted third party. In a representative use-case, a smart contract is executed when multiple parties fairly trade on a blockchain asset. On blockchain systems, a smart contract can be regarded as a system participant, responding to the information received, receiving and storing values, and sending information and values outwards. Also, a smart contract can temporarily keep assets, and always perform operations in accordance with prior rules. Many cryptocurrencies have implemented smart contracts. At POST2018, Atzei et al. give formulations of seven fair exchange protocols using smart contract on Bitcoin: oracle, escrow, intermediated payment, timed commitment, micropayment channels, fair lotteries, and contingent payment. However, they only give an informal discussion on security. In this paper, we verify the fairness of their seven protocols by using the formal verification tool ProVerif. As a result, we show that five protocols (the oracle, intermediated payment, timed commitment, micropayment channels and fair lotteries protocols) satisfy fairness, which were not proved formally. Also, we re-find known attacks to break fairness of two protocols (the escrow and contingent payment protocols). For the escrow protocol, we formalize the two-party scheme and the three-party scheme with an arbitrator, and show that the two-party scheme does not satisfy fairness as Atzei et al. showed. For the contingent payment protocol, we formalize the protocol with the non-interactive zero-knowledge proof (NIZK), and re-find the attack shown by Campanelli et al. at CCS 2017. Also, we show that a countermeasure with subversion NIZK against the attack works properly while it is not formally proved.
Bruno Bernardo, Raphaël Cauderlier, Basile Pesin, Julien Tesson
Tezos is a smart-contract blockchain. Tezos smart contracts are written in a low-level stack-based language called Michelson. In this article we present Albert, an intermediate language for Tezos smart contracts which abstracts Michelson stacks as linearly typed records. We also describe its compiler to Michelson, written in Coq, that targets Mi-Cho-Coq, a formal specification of Michelson implemented in Coq.
Zaoyu Wei, Jiaqi Wang, Xueqi Shen, Qun Luo
Smart contract has greatly improved the services and capabilities of blockchain, but it has become the weakest link of blockchain security because of its code nature. Therefore, efficient vulnerability detection of smart contract is the key to ensure the security of blockchain system. Oriented to Ethereum smart contract, the study solves the problems of redundant input and low coverage in the smart contract fuzz. In this paper, a taint analysis method based on EVM is proposed to reduce the invalid input, a dangerous operation database is designed to identify the dangerous input, and genetic algorithm is used to optimize the code coverage of the input, which construct the fuzzing framework for smart contract together. Finally, by comparing Oyente and ContractFuzzer, the performance and efficiency of the framework are proved.
Pedro Antonino, A. W. Roscoe
The exploitation of smart-contract vulnerabilities can have catastrophic consequences such as the loss of millions of pounds worth of crypto assets. Formal verification can be a useful tool in identifying vulnerabilities and proving that they have been fixed. In this paper, we present a formalisation of Solidity and the Ethereum blockchain using the Solid language and its blockchain; a Solid program is obtained by explicating/desugaring a Solidity program. We make some abstractions that over-approximate the way in which Solidity/Ethereum behave. Based on this formalisation, we create Solidifier: a bounded model checker for Solidity. It translates Solid into Boogie, an intermediate verification language, that is later verified using Corral, a bounded model checker for Boogie. Unlike much of the work in this area, we do not try to find specific behavioural/code patterns that might lead to vulnerabilities. Instead, we provide a tool to find errors/bad states, i.e. program states that do not conform with the intent of the developer. Such a bad state, be it a vulnerability or not, might be reached through the execution of specific known code patterns or through behaviours that have not been anticipated.
charles adjovu, Ewa Fabian
Licensing is one of the essential means of exploiting the monetary value of a musical work, and yet it is an area fraught with many issues and transactional costs which make it a difficult process for individuals and organizations. Many issues in music licensing arise from the legal complexity (e.g., national and international copyright law), business complexity (authentication, tracking, accounting, etc.), value web complexity (transparency of relationships among stakeholders), and technical complexity (e.g., establishing a global repertoire database for music, sufficient metadata standards) of working with music. Then, in addition to these issues, there are specific transactional costs (identification, negotiation, monitoring, and enforcement) associated with the licensing process. To mitigate the complexity and transactional costs associated with music and the licensing process, researchers and technologists have been investigating how new technologies and design models from the Web3 space, such as blockchain, linked data and Ricardian Contracts, can automate processes to reduce complexity, speed up payments, improve tracking, and provide other benefits in the music industry. In our report, we make our own attempt to reduce the complexity and transactional costs in the licensing process by developing an automated music license. In doing so, we first conducted a literature review scoping the intersection of music complexity and Web3 technologies to provide background and context to automating music licensing. Then we developed the Practical Tokenized Drafting (PTD) method, a set of core principles and practices for drafting Ricardian Contracts that interact with Web3 technologies (RC-Web3 Templates), and the Tokenized Music License (TML), an RC-Web3 Template standard form for music licensing on the OpenLaw platform. Both the PTD and TML can be adapted to meet the needs of music industry stakeholders and provide guidance to legal practitioners in drafting RC-Web3 Templates.
Matteo Marescotti, Rodrigo Otoni, Leonardo Alt, Patrick Eugster · 6 authors
No abstract is available for this record.
Arnab Chatterjee, Yash Pitroda, Manojkumar Parmar
Access control management is an integral part of maintaining the security of an application. Although there has been significant work in the field of cloud access control mechanisms, however, with the advent of Distributed Ledger Technology (DLT), on-chain access control management frameworks hardly exist. Existing access control management mechanisms are tightly coupled with the business logic, resulting in governance issues, non-coherent with existing Identity Management Solutions, low security, and compromised usability. We propose a novel framework to implement dynamic role-based access control for decentralized applications (dApps). The framework allows for managing access control on a dApp, which is completely decoupled from the business application and integrates seamlessly with any dApps. The smart contract architecture allows for the independent management of business logic and execution of access control policies. It also facilitates secure, low cost, and a high degree of flexibility of access control management. The proposed framework promotes decentralized governance of access control policies and efficient smart contract upgrades. We also provide quantitative and qualitative metrics for the efficacy and efficiency of the framework. Any Turing complete smart contract programming language is an excellent fit to implement the framework. We expect this framework to benefit enterprise and non-enterprise dApps and provide greater access control flexibility and effective integration with traditional and state of the art identity management solutions.
Chang Hyun Roh, Yong Woon Hwang, Im-Yeong Lee
E-government systems have ensured reliable data and prevented the forgery and modulation of that information, and so far, this role has been carried out in traditional centralized management. However, centralized data management has the disadvantage of single point of failure and bottlenecks. Blockchain technology has emerged to solve this problem. It is characterized by decentralization, which has been considered insecure in the past, to ensure the integrity of data. However, there are many problems in applying general blockchain and smart contracts to e-government electronic voting. In this paper, we propose a scheme to guarantee the integrity of voting data and to automate the process of voting and counting by smart contract by applying blockchain and smart contract to provide integrity and automation function to electronic voting.