prikaz prve stranice dokumenta Sigurnosna analiza pametnih ugovora
No public access
undergraduate thesis
Sigurnosna analiza pametnih ugovora
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. urn:nbn:hr:168:119919
Futivić, Ivan
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Futivić, I. (2022). Sigurnosna analiza pametnih ugovora (Undergraduate thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:119919

Futivić, Ivan. "Sigurnosna analiza pametnih ugovora." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. https://urn.nsk.hr/urn:nbn:hr:168:119919

Futivić, Ivan. "Sigurnosna analiza pametnih ugovora." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. https://urn.nsk.hr/urn:nbn:hr:168:119919

Futivić, I. (2022). 'Sigurnosna analiza pametnih ugovora', Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 26 June 2024, https://urn.nsk.hr/urn:nbn:hr:168:119919

Futivić I. Sigurnosna analiza pametnih ugovora [Undergraduate thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2022 [cited 2024 June 26] Available at: https://urn.nsk.hr/urn:nbn:hr:168:119919

I. Futivić, "Sigurnosna analiza pametnih ugovora", Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2022. Available at: https://urn.nsk.hr/urn:nbn:hr:168:119919

Metadata
TitleSigurnosna analiza pametnih ugovora
Title (english)Security analysis of smart contract
AuthorIvan Futivić
MentorAnte Đerek (mentor)
Committee memberAnte Đerek (predsjednik povjerenstva)
Committee memberLucija Šikić (član povjerenstva)
Committee memberPetar Paradžik (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2022-07-06, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Pametni ugovori su programi koji se na deterministički način izvršavaju na kriptografskom lancu blokova pomoću virtualnog stroja i zajedničkog mehanizma konsenzusa. Ti programi mogu implementirati vlastitu logiku te raspolagati kriptovalutama. Stoga je od iznimne važnosti osigurati da su pametni ugovori otporni na napade i zlouporabu. U prvom dijelu rada predstavljeni su osnovni termini i potrebne tehnologije za korištenje pametnih ugovora te je ukratko prikazana njihova povijest. U drugom dijelu prikazane su neke od najčešćih ranjivosti koje su prisutne u pametnim ugovora i načini na koji mogu biti iskorištene od strane napadača. Objašnjeni su načini kako se mogu preventirati spomenute ranjivosti te su navedeni neki primjeri napada koji su se zaista dogodili. Konačno, predstavljena je potencijalna Front Running ranjivost u ERC-918 pametnim ugovorima te je implementiran jednostavni primjer pomoću kojeg je simuliran napad. Također, predložen je jedan od potencijalnih načina zaštite od takvoga napada.
Abstract (english)
Smart contracts are programs that are deterministically executed on a blockchain using a virtual machine and a common consensus mechanism. These programs can implement their own logic as well as manage cryptocurrencies. It is therefore crucial that smart contracts are resistant to attacks and malicious use. The first part of the paper presents the basic terms and necessary technologies for the use of smart contracts, as well as a short summary of their history. The second part shows some of the most common vulnerabilities that are present in smart contracts and the ways in which they can be exploited by attackers. Some preventative techniques are described, and real-world examples are given for the aforementioned vulnerabilities. Finally, a potential Front Running vulnerability in smart contracts that implement the ERC-918 standard is presented, and a simple example is given that simulates the attack. Also, one potential way to protect against such an attack is suggested.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:119919
Study programmeTitle: Computing
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2023-01-15 10:09:15