Research And Design Of Blockchain Application Development And Its Security Verification Tools

Because of the non-tampering nature of the blockchain,smart contract codes that are already deployed online will not be able to be modified or upgraded.Once the smart contracts have some bugs caused by the code designning of the smart contract,the whole blockchain application will collapse,and there would be irreversible significant losses.However,using some code defect inspection methods,such as model checking,static code analysis and other techniques,to find the program defect code in advance,and timely modify the problem code,can play a preventive role in developing security application.Base on Ethereum blockchain platform,this paper will introduce how to develop the security decentralized application of blockchain,and conduct an in-depth study on the principles of blockchain technology,the decentralized application framework of ethereum blockchain,the development of blockchain smart contract,and the defects and loopholes of ethereum smart contract.In addition to this,this paper proposes a tool framework that combines formal validation with static code inspection to verify the defects and vulnerabilities of smart contracts.Finally,based on the framework of block chain application and security verification tool,this paper develops a decentralized blockchain application named "cryptopanda" and an automated ethereum smart contract vulnerability security inspection tool,and introduces the development process and technical principle of the decentralized application "cryptopanda" and smart contract verification tool in detail.The paper is mainly divided into the following aspects:(1)This paper studies blockchain technology and ethereum blockchain platform,and summarizes a decentralized application framework of ethereum blockchain platform;Based on this framework,a decentralized application of blockchain was developed on the ethereum platform.(2)This paper summarized several common security vulnerability models of smart contracts on ethereum blockchain platform.Combined with blockchain technology and code security inspection technology,this paper analyzed the causes of each smart contract vulnerability and methods for security verification of different vulnerabilities.(3)In combination with model check technology of formalized verification and static code check technology,and based on the intelligent contract vulnerability model and security verification method,this paper proposed a framework of automated smart contract security verification tool,and based on this framework,an automated ethereum smart contract vulnerability security verification tool is developed.At the end of the paper,the demonstration and performance test of blockchain application and smart contract security verification tool are carried out.From the test results,the decentralized application of the blockchain developed in the paper has the characteristics of transparency,traceable,non-tampering,privacy protection,etc.Compared with the traditional application,it is of revolutionary significance.And the vulnerability inspection tool can also effectively find out the basic defects and vulnerabilities in the smart contract,which is of great significance for the development of security blockchain applications.