CoinWatch: A Clone-Based Approach for Detecting Vulnerabilities in Cryptocurrencies
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26230%2F20%3APU138635" target="_blank" >RIV/00216305:26230/20:PU138635 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1109/Blockchain50366.2020.00011" target="_blank" >http://dx.doi.org/10.1109/Blockchain50366.2020.00011</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1109/Blockchain50366.2020.00011" target="_blank" >10.1109/Blockchain50366.2020.00011</a>
Alternative languages
Result language
angličtina
Original language name
CoinWatch: A Clone-Based Approach for Detecting Vulnerabilities in Cryptocurrencies
Original language description
Cryptocurrencies have become very popular in recent years. Thousands of new cryptocurrencies have emerged, proposing new and novel techniques that improve on Bitcoin's core innovation of the blockchain data structure and consensus mechanism. However, cryptocurrencies are a major target for cyber-attacks, as they can be sold on exchanges anonymously and most cryptocurrencies have their codebases publicly available. One particular issue is the prevalence of code clones in cryptocurrencies, which may amplify security threats. If a vulnerability is found in one cryptocurrency, it might be propagated into other cloned cryptocurrencies. In this work, we propose a systematic remedy to this problem, and we propose CoinWatch (CW). Given a reported vulnerability at the input, CW uses the code evolution analysis and a clone detection technique for indication of cryptocurrencies that might be vulnerable. We applied CW on 1094 cryptocurrencies using 4 CVEs and obtained 786 true vulnerabilities present in 384 projects, which were confirmed with developers and successfully reported as CVE extensions.
Czech name
—
Czech description
—
Classification
Type
D - Article in proceedings
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)
Result continuities
Project
Result was created during the realization of more than one project. More information in the Projects tab.
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)
Others
Publication year
2020
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Article name in the collection
3rd IEEE INTERNATIONAL CONFERENCE ON BLOCKCHAIN (BLOCKCHAIN 2020)
ISBN
978-0-7381-0495-9
ISSN
—
e-ISSN
—
Number of pages
9
Pages from-to
17-25
Publisher name
Institute of Electrical and Electronics Engineers
Place of publication
Rhodos
Event location
Rhodos
Event date
Nov 2, 2020
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
000647642100003