CoinWatch：一种基于克隆的加密货币漏洞检测方法
CoinWatch: A Clone-Based Approach For Detecting Vulnerabilities in Cryptocurrencies
摘要：
加密货币近年来变得非常流行。成千上万的新加密货币已经出现，提出了新的和新颖的技术，改进了比特币的区块链数据结构和共识机制的核心创新。然而，加密货币是网络攻击的主要目标，因为它们可以在交易所匿名出售，并且大多数加密货币的代码库都是公开的。一个特别的问题是加密货币中代码克隆的流行，这可能会放大安全威胁。如果在一种加密货币中发现漏洞，它可能会传播到其他克隆的加密货币中。在这项工作中，我们提出了一个系统的解决方案，我们提出了CoinWatch（CW）。考虑到输入端报告的漏洞，CW使用代码演化分析和克隆检测技术来指示可能存在漏洞的加密货币。我们使用4个CVE在1094种加密货币上应用了CW，并在384个项目中获得了786个真实漏洞，这些漏洞已被开发人员确认并成功报告为CVE扩展。
英文摘要：
Cryptocurrencies have become very popular in recent years. Thousands of new cryptocurrencies have emerged, proposing new and novel techniques that improve on Bitcoin's core innovation of the blockchain data structure and consensus mechanism. However, cryptocurrencies are a major target for cyber-attacks, as they can be sold on exchanges anonymously and most cryptocurrencies have their codebases publicly available. One particular issue is the prevalence of code clones in cryptocurrencies, which may amplify security threats. If a vulnerability is found in one cryptocurrency, it might be propagated into other cloned cryptocurrencies. In this work, we propose a systematic remedy to this problem, and we propose CoinWatch (CW). Given a reported vulnerability at the input, CW uses the code evolution analysis and a clone detection technique for indication of cryptocurrencies that might be vulnerable. We applied CW on 1094 cryptocurrencies using 4 CVEs and obtained 786 true vulnerabilities present in 384 projects, which were confirmed with developers and successfully reported as CVE extensions.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
