Fujitsu Develops Technology to Verify Blockchain Risks
Risk detection is automatic and comprehensive to improve safety of smart contracts
TOKYO, Mar 07, 2018 - (JCN Newswire) - Fujitsu Laboratories Ltd. and Fujitsu Research and Development Center Co., Ltd. today announced development of technology that can verify, in advance, risks associated with smart contracts, which are programs that automatically execute transactions on blockchain platforms. The technology also identifies relevant locations in the source code.
Blockchain technology, which was developed as the foundation for Bitcoin, is expected to have applications in a variety of fields beyond finance, including real estate and healthcare. Because smart contract risks are directly linked with business losses, however, there have been issues with improving their reliability as a system. Now, Fujitsu Laboratories and Fujitsu Research and Development Center have developed algorithms to identify risk-affected transaction sequences on Ethereum(1), a platform for executing blockchain applications, using symbolic execution technology(2). Using these algorithms, they have developed technology that is able to comprehensively detect six types of risks in smart contracts, which have the potential to be overlooked in a manual review, and can then identify the relevant locations in the source code. This technology will enable blockchain developers to rapidly develop even safer smart contracts.
Details of this technology were announced at the Blockchains and Smart Contracts Workshop 2018 (BSC 2018), an international conference that was held in Paris, France, February 26-28.
Development Background
Blockchain technology can ensure that, even without a trusted third-party intermediary, data has not been altered, and is expected to have applications not only in the field of finance, but also in securities management, real estate registration, healthcare, and electronic government.
Blockchain offers functionality known as smart contracts, in which a contract can be automatically formed in the system, and by using these, contacts can be checked and executed automatically. Because smart contracts are copied to multiple locations and executed in a distributed manner, once a contract has been executed, it cannot easily be stopped, and it cannot be revised even if risks are found in the smart contract. In fact, there has been an incident in which, because a smart contract to create an automatic investment trust application on a blockchain was flawed, a huge amount of capital was improperly transferred.
Issues
With Ethereum, one execution platform of blockchain application, smart contract risks are grouped into six categories, but previous technologies to detect smart contract risks in advance were unable to detect all of the different types. For source call authentication through indirect calls via multiple smart contracts lead to changes in the information in the transaction's source call due to an Ethereum specification, which can be abused to illicitly evade authentication. Previous technologies could not detect the risk as they could not trace transaction internal information.
About the Newly Developed Technology
Now, Fujitsu Laboratories and Fujitsu Research and Development Center have developed technologies to automatically detect risks in smart contracts for Ethereum that could not previously be detected, and also to identify the relevant locations in the source code.
Details of the technology are as follows:
1. Technology to detect smart contract risks using symbolic execution technology
Fujitsu Laboratories and Fujitsu Research and Development Center have now developed an algorithm to comprehensively identify bugs in the source code that might give rise to a risk of someone abusing the language specifications of Ethereum to fake the origin of a transaction call, by using symbolic execution to virtually execute transactions under a variety of circumstances according to the source code based on the sequence of improper processing up to the authentication rules set in advance, the results of a comparison with code patterns unique to Ethereum linked with fraud, and on the presence or absence of access to transaction records unique to blockchain technology. This technology provides comprehensive, highly accurate risk detection.
2. Technology to very accurately identify relevant places in source code for discovered risks
Fujitsu Laboratories and Fujitsu Research and Development Center have developed technology to identify to what part of the source code a newly discovered risk applies with high accuracy. This technology makes symbolic execution possible by deleting unused commands from a debugging execution file, appended with source-code information, that corresponds to Ethereum execution files, which makes it possible to identify source code locations that correspond to risks identified in the execution file by estimating the corresponding relationship between the execution file and the debugging execution file using information such as the types and sequence of virtually executed processing commands.
Results
Using this newly developed technology, the two companies found that where previous verification tools(3) had a detection rate of about 67%, this new technology was capable of 100% detection, excepting a few items, and that in terms of precision it achieved an accuracy rate of up to 88%, enabling both highly accurate risk detection as well as source code risk location identification. Because over-identification of risk is rare, this technology will enable more efficient smart contract development, and combined with the risk location identification technology, it is also expected to reduce the workload involved in tasks such as specification comprehension, code evaluation, and fixing the code. This technology will contribute to the efficient application of blockchain technology to a wide variety of fields.
Future Plans
Going forward, Fujitsu Laboratories will continue to develop verification technologies, not only for Ethereum, but also for Hyperledger Fabric(4), a blockchain framework implementation and one of the Hyperledger projects hosted by The Linux Foundation, with the goal of commercialization of this technology during fiscal 2018. In addition, Fujitsu Laboratories will not only continue to develop verification technology for smart contracts, but also broad technology development relating to building secure systems using blockchain.
(1) Ethereum A primarily public-facing blockchain application execution platform. (https://www.ethereum.org/) (2) Symbolic execution technology Technology to thoroughly investigate the operation of a program in response to every possible variable of a value. (3) Previous verification tools Verification using Oyente, a smart contract analysis tool for Ethereum. (4) Hyperledger Fabric A blockchain framework implementation and one of the Hyperledger projects that is Intended to be a foundation for developing applications or solutions with a modular architecture. Hyperledger Fabric allows components, such as consensus and membership services, to be plug-and-play and leverages container technology to host smart contracts called "chaincode" that comprise the application logic of the system. (https://hyperledger.org/projects/fabric)
About Fujitsu Laboratories
Founded in 1968 as a wholly owned subsidiary of Fujitsu Limited, Fujitsu Laboratories Ltd. is one of the premier research centers in the world. With a global network of laboratories in Japan, China, the United States and Europe, the organization conducts a wide range of basic and applied research in the areas of Next-generation Services, Computer Servers, Networks, Electronic Devices and Advanced Materials. For more information, please see: http://www.fujitsu.com/jp/group/labs/en/.
Contact:Fujitsu Laboratories Ltd.
Information Systems Technologies Laboratory
E-mail: labs-bcdev-inquiry@dl.jp.fujitsu.com
Fujitsu Limited
Public and Investor Relations
Tel: +81-3-6252-2176
URL: www.fujitsu.com/global/news/contacts/
Source: Fujitsu Ltd Sectors: Electronics, Cloud & Enterprise
Copyright ©2024 JCN Newswire. All rights reserved. A division of Japan Corporate News Network.
|
Latest Release
Mazda Production and Sales Results for March 2024 and for April 2023 through March 2024 Apr 25, 2024 18:21 JST
| MHI Begins Operation of SOEC Test Module the Next-Generation High-Efficiency Hydrogen Production Technology at Takasago Hydrogen Park Apr 25, 2024 17:45 JST
| GAC Honda to Begin Sales of All-new e:NP2, the Second Model of e:N Series Apr 25, 2024 16:50 JST
| Toyota Exhibiting at Beijing Motor Show 2024 Apr 25, 2024 16:25 JST
| Honda Reaches Basic Agreement with Asahi Kasei on Collaboration for Production of Battery Separators for Automotive Batteries in Canada Apr 25, 2024 11:10 JST
| UNIQLO Sponsors KAWS + Warhol Exhibition Tour, Starting in Pittsburgh Apr 25, 2024 09:00 JST
| Mitsubishi Power Begins Commercial Operation of Seventh M701JAC Gas Turbine in Thailand GTCC Project; Achieves 75,000 AOH To-Date Apr 24, 2024 17:19 JST
| MC and Denka Sign J/V Agreement in Fullerene Business Apr 24, 2024 17:02 JST
| Mitsubishi Motors Posts Record Sales in the Philippines in FY2023 Apr 24, 2024 13:56 JST
| NEC Develops High-speed Generative AI Large Language Models (LLM) with World-class Performance Apr 24, 2024 13:25 JST
| Fujitsu SX Survey reveals key success factors for sustainability Apr 23, 2024 10:25 JST
| Fujitsu and METRON collaborate to drive ESG success: slashing energy costs, boosting productivity with new manufacturing industry solutions Apr 22, 2024 16:09 JST
| NEC Strengthens Commitment to Space Industry with Investment in Seraphim Space Venture Fund II Apr 22, 2024 15:09 JST
| Soft Space Launches the First and Only JCB Payment Gateway in Malaysia Apr 22, 2024 15:00 JST
| TOYOTA GAZOO Racing takes a one-two in Croatian thriller Apr 22, 2024 10:47 JST
| First-ever Mazda CX-80 Crossover SUV Unveiled in Europe Apr 19, 2024 13:50 JST
| Fujitsu develops technology to convert corporate digital identity credentials, enabling participation of non-European companies in European data spaces Apr 19, 2024 10:17 JST
| Mitsubishi Heavy Industries and NGK to Jointly Develop Hydrogen Purification System from Ammonia Cracking Gas Apr 18, 2024 17:01 JST
| Toyota Launches All-New Land Cruiser "250" Series in Japan Apr 18, 2024 13:39 JST
| Fujitsu and Oracle collaborate to deliver sovereign cloud and AI capabilities in Japan Apr 18, 2024 11:14 JST
|
More Latest Release >>
|