@inproceedings{02a7857fd0624eab91ce833a3238d5ef,
title = "VDABSys: A Novel Security-Testing Framework for Blockchain Systems Based on Vulnerability detection",
abstract = "Blockchain technology is a popular solution for secure transactions in untrusted networks. However, with the growing number of blockchain applications, how to ensure the security of the blockchain system itself has become an urgent problem. In this paper, we propose a novel security-testing framework for blockchain systems based on a vulnerability-detection model. Our study involves an analysis and comparison with existing software-vulnerability analysis methods. Our framework first addresses each factor that impacts the security of the blockchain system, with a vulnerability attack graph being constructed using model-checking to describe the complete exploitation process of system vulnerabilities. Reliability Theory is used to quantitatively assess the vulnerability attack graph of the blockchain system, thereby providing a theoretical basis for evaluating its security. Finally, we verify the effectiveness and feasibility of the proposed security-testing framework for blockchain systems on an e-voting election blockchain system. The results from our extensive experiments show that our proposed method outperforms other formal-verification-based methods for detecting blockchain vulnerabilities, and also provides a scientific and reliable assessment of blockchain system security.",
keywords = "Blockchain system, Formal theory, Reliability theory, Vulnerability attack graph, Vulnerability detection model",
author = "Jinfu Chen and Qiaowei Feng and Saihua Cai and Dengzhou Shi and Dave Towey and Yuhao Chen and Dongjie Wang",
note = "Publisher Copyright: {\textcopyright} ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2025.; 19th EAI International Conference on Security and Privacy in Communication Networks, SecureComm 2023 ; Conference date: 19-10-2023 Through 21-10-2023",
year = "2025",
doi = "10.1007/978-3-031-64948-6_15",
language = "English",
isbn = "9783031649479",
series = "Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST",
publisher = "Springer Science and Business Media Deutschland GmbH",
pages = "287--305",
editor = "Haixin Duan and Mourad Debbabi and {de Carn{\'e} de Carnavalet}, Xavier and Xiapu Luo and Au, {Man Ho Allen} and Xiaojiang Du",
booktitle = "Security and Privacy in Communication Networks - 19th EAI International Conference, SecureComm 2023, Proceedings",
address = "Germany",
}