Modeling and Enforcing Access Control Policies for Smart Contracts
Töberg J-P, Schiffl J, Reiche F, Beckert B, Heinrich R, Reussner R (2022)
In: 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS). IEEE: 38-47.
Konferenzbeitrag
| Veröffentlicht | Englisch
Download
Es wurden keine Dateien hochgeladen. Nur Publikationsnachweis!
Autor*in
Töberg, Jan-PhilippUniBi ;
Schiffl, Jonas;
Reiche, Frederik;
Beckert, Bernhard;
Heinrich, Robert;
Reussner, Ralf
Einrichtung
Abstract / Bemerkung
Ethereum smart contracts expose their functions to an untrusted network. Therefore, access control is of utmost importance. Nevertheless, many smart contracts have suffered exploits due to improper design or implementation of access control policies. In this work, we propose an approach for modeling role-based access control policies for Ethereum smart contracts on the architecture level, and we describe a process for ensuring that the implementation is correct w.r.t. that model. We achieve this through a combination of code generation, formal verification and static code analysis. Additionally, we provide an argument for the correctness of our approach and demonstrate its feasibility by detecting manually introduced violations in a case study.
Erscheinungsjahr
2022
Titel des Konferenzbandes
2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS)
Seite(n)
38-47
Konferenz
2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS)
Konferenzort
Newark, CA, USA
Konferenzdatum
2022-08-15 – 2022-08-18
eISBN
978-1-6654-9172-3
Page URI
https://pub.uni-bielefeld.de/record/2966035
Zitieren
Töberg J-P, Schiffl J, Reiche F, Beckert B, Heinrich R, Reussner R. Modeling and Enforcing Access Control Policies for Smart Contracts. In: 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS). IEEE; 2022: 38-47.
Töberg, J. - P., Schiffl, J., Reiche, F., Beckert, B., Heinrich, R., & Reussner, R. (2022). Modeling and Enforcing Access Control Policies for Smart Contracts. 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), 38-47. IEEE. https://doi.org/10.1109/DAPPS55202.2022.00013
Töberg, Jan-Philipp, Schiffl, Jonas, Reiche, Frederik, Beckert, Bernhard, Heinrich, Robert, and Reussner, Ralf. 2022. “Modeling and Enforcing Access Control Policies for Smart Contracts”. In 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), 38-47. IEEE.
Töberg, J. - P., Schiffl, J., Reiche, F., Beckert, B., Heinrich, R., and Reussner, R. (2022). “Modeling and Enforcing Access Control Policies for Smart Contracts” in 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS) (IEEE), 38-47.
Töberg, J.-P., et al., 2022. Modeling and Enforcing Access Control Policies for Smart Contracts. In 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS). IEEE, pp. 38-47.
J.-P. Töberg, et al., “Modeling and Enforcing Access Control Policies for Smart Contracts”, 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), IEEE, 2022, pp.38-47.
Töberg, J.-P., Schiffl, J., Reiche, F., Beckert, B., Heinrich, R., Reussner, R.: Modeling and Enforcing Access Control Policies for Smart Contracts. 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS). p. 38-47. IEEE (2022).
Töberg, Jan-Philipp, Schiffl, Jonas, Reiche, Frederik, Beckert, Bernhard, Heinrich, Robert, and Reussner, Ralf. “Modeling and Enforcing Access Control Policies for Smart Contracts”. 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS). IEEE, 2022. 38-47.