RMIT University
Browse

BiAn: Smart Contract Source Code Obfuscation

journal contribution
posted on 2024-11-03, 11:08 authored by Pengcheng Zhang, Qifan Yu, Yan Xiao, Hai DongHai Dong, Xiapu Luo, Xiao Wang, Meng Zhang
With the rising prominence of smart contracts, security attacks targeting them have increased, posing severe threats to their security and intellectual property rights. Existing simplistic datasets hinder effective vulnerability detection, raising security concerns. To address these challenges, we propose BiAn , a source code level smart contract obfuscation method that generates complex vulnerability test datasets. BiAn protects contracts by obfuscating data flows, control flows, and code layouts, increasing complexity and making it harder for attackers to discover vulnerabilities. Our experiments with buggy contracts showed an average complexity enhancement of approximately 174% after obfuscation. Decompilers Vandal and Gigahorse had total failure rate increments of 38.8% and 40.5% respectively. Obfuscated contracts also decreased vulnerability detection rates in more than 50% of cases for ten widely-used static analysis detection tools.

History

Related Materials

  1. 1.
    DOI - Is published in 10.1109/TSE.2023.3298609
  2. 2.
    ISSN - Is published in 00985589

Journal

IEEE Transactions on Software Engineering

Volume

49

Issue

9

Start page

4456

End page

4476

Total pages

21

Publisher

IEEE

Place published

United States

Language

English

Copyright

© 2023 IEEE

Former Identifier

2006125676

Esploro creation date

2023-09-29