Sigurnosna svojstva pametnih ugovora na platformi Ethereum

undergraduate thesis

• Title (english): Security properties of smart contracts on the Ethereum platform
• Author: Blaž Bagić
• Mentor: Ante Đerek (mentor)
• Committee member: Ante Đerek (predsjednik povjerenstva)
• Committee member: Ivan Kovačević (član povjerenstva)
• Committee member: Karlo Knežević (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2018-07-13, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Kriptografski lanac blokova (eng. Blockchain) je distribuirana baza podataka koja održava rastuću listu transakcija te koristi kriptografiju kako bi osigurala integritet i neporecivost pohranjenih podataka.
Jedna novija primjena lanca blokova je izgradnja sustava pametnih ugovora. Iako se svakodnevno pojavljuje mnoštvo distribuiranih aplikacija koje koriste pametne ugovore, nejasno je koja točno sigurnosna svojstva ti pametni ugovori pružaju krajnjim korisnicima.
U sklopu ovog rada napravljen je pregled relevantnih ranjivosti na platformi Ethereum, također su primjerima ilustrirani napadi koji izrabljuju te ranjivosti. Konačno, u poglavlju 4 objašnjene su sigurnosne preporuke pomoću kojih se opisane ranjivosti mogu izbjeći.

Abstract (english)

Blockchain is a distributed database maintaining a continuously growing list of records, called blocks, which are linked and secured using cryptography.
One of the newest applications of the blockchain is the development of smart contracts. Although a lot of smart contract based distributed applications are developed daily, it is unclear which exactly security properties do those smart contracts possess.
In this thesis we investigate the functionalities and security properties of a platform for smart contracts Ethereum. Most known attacks are documented and illustrated by examples based on research we have conducted. Also, a taxonomy of known attacks and their explanation is provided in this thesis. Finally, in section 4, is an overview of security recommendations which can help avoid mentioned vulnerabilities.

• Keywords: Ether; Ethereum; pametni ugovor; lanac blokova; čvor; kripto-valuta; Ethereum virtualni stroj; rudar; gorivo; fallback funkcija; adresa; javni ključ; privatni ključ
• Keywords (english): Ether; Ethereum; smart contract; Blockchain; node; crypto currency; Ethereum virtual machine; miner; gas; fallback function; address; public key; private key
• Language: croatian
• URN:NBN: urn:nbn:hr:168:926182
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-03-13 18:44:35