nach oben

Erschienen in:

2020 | OriginalPaper | Buchkapitel

Secure Smart Contract Generation Based on Petri Nets

verfasst von : Nejc Zupan, Prabhakaran Kasinathan, Jorge Cuellar, Markus Sauer

Erschienen in: Blockchain Technology for Industry 4.0

Verlag: Springer Singapore

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

Existing blockchain and smart contract development ecosystems do not support to design, develop, and verify secure smart contracts before deploying them. Recent attacks (see DAO hack [5]) on insecure smart contracts have caused a lot of financial loss—to avoid such issues in the future, we need better methods for creating secure smart contracts before deploying them in a blockchain. In this chapter, we present a method and a prototype tool to generate secure smart contracts based on Petri Nets. Our method allows to design and generate a secure smart contract template that can be deployed on a supported blockchain platform (e.g. Ethereum) with very little additional effort. One of the main advantages that our method brings into the smart contract development ecosystem is introducing a formal way to visually model, simulate, and verify business logic/workflows prior to the smart contract code generation. Modeling the smart contracts via Petri Nets helps the developers to minimize the logical errors—by verifying certain Petri Net properties such as deadlocks—during the modeling stage itself. Furthermore, our approach presents a technology-independent way to import and export the modeled use-case logic which can be translated into different smart contract language later.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel Blockchain Technology for Data Management in Industry 4.0

Nächstes Kapitel Blockchain for Machine to Machine Interaction in Industry 4.0

Nur mit Berechtigung zugänglich

https://www.informatik.uni-hamburg.de/TGI/PetriNets/tools/.

Atluri V, Huang W (1996) An authorization model for workflows. In: Computer security—ESORICS 96, 4th European symposium on research in computer security, Rome, Italy, 25–27 September, 1996, Proceedings, pp 44–64. https://doi.org/10.1007/3-540-61770-1_27

Atluri V, Huang W (2000) A petri net based safety analysis of workflow authorization models. J Comput Secur 8(2/3):209–240. http://content.iospress.com/articles/journal-of-computer-security/jcs113

Choudhury O, Rudolph N, Sylla I, Fairoza N, Das (2018) A Auto-generation of smart contracts from domain-specific ontologies and semantic rules. In: IEEE Blockchain Conference, vol 2018

Delmolino K, Arnett M, Kosba AE, Miller A, Shi E (2015) Step by step towards creating a safe smart contract: lessons and insights from a cryptocurrency lab. IACR Cryptology ePrint Archive, vol 2015, p 460. https://eprint.iacr.org/2015/460.pdf

Dhillon V, Metcalf D, Hooper M (2017) The DAO hacked. Apress, Berkeley, pp 67–78. https://doi.org/10.1007/978-1-4842-3081-7_6

Dijkstra EW (1975) Guarded commands, nondeterminacy and formal derivation of programs. Commun ACM 18(8):453–457. http://portal.acm.org/citation.cfm?doid=360933.360975

A Pinna A, Tonelli R, Orrú M, Marchesi M (2018) A Petri Nets model for blockchain analysis. Comput J 61(9):1374–1388. https://doi.org/10.1093/comjnl/bxy001. Automatic code generation from high-level Petri-Nets for model driven systems engineering

Esparza J (1998) Decidability and complexity of Petri Net problems an introduction. In: Lectures on Petri Nets I: basic models. Springer, Berlin, p 55. http://www.springerlink.com/index/0nl351947367n07l.pdf

Ethereum (2018) Solidity solidity. https://solidity.readthedocs.io/en/develop/. Accessed August 2018

10.

Ethereum (2018) What are smart contracts—EthereumWiki. http://www.ethereumwiki.com/ethereum-wiki/smart-contracts/. Accessed March 2018

11.

Freytag T, Sänger M (2014) Woped-an educational tool for workflow nets. In: BPM (Demos), p 31

12.

García-Bañuelos L, Ponomarev A, Dumas M, Weber I (2017) Optimized execution of business processes on blockchain. In: Business process management—15th international conference, BPM 2017, Barcelona, Spain, 10–15 September 2017, Proceedings, pp 130–146. https://doi.org/10.1007/978-3-319-65000-5_8

13.

Haber S, Stornetta WS (1991) How to time-stamp a digital document. J Cryptol 3(2):99–111. https://doi.org/10.1007/BF00196791

14.

Jamal M, Zafar NA (2016) Transformation of activity diagram into coloured Petri Nets using weighted directed graph. In: 2016 international conference on frontiers of information technology (FIT). IEEE, pp 181–186. http://ieeexplore.ieee.org/document/7866750/

15.

Jensen K, Kristensen LM, Wells L (2007) Coloured petri nets and CPN tools for modelling and validation of concurrent systems. STTT 9(3–4):213–254. https://doi.org/10.1007/s10009-007-0038-x

16.

Kasinathan P, Cuéllar J (2018) Securing the integrity of workflows in iot. In: Proceedings of the 2018 International Conference on Embedded Wireless Systems and Networks, EWSN 2018. Madrid, Spain, 14–16 February 2018, pp 252–257. http://dl.acm.org/citation.cfm?id=3234908

17.

Kasinathan P, Cuéllar J (2018) Workflow-aware security of integrated mobility services. In: Computer security—23rd European symposium on research in computer security, ESORICS 2018, Barcelona, Spain, 3–7 September 2018, Proceedings, Part II, pp 3–19. https://doi.org/10.1007/978-3-319-98989-1_1

18.

Kasinathan P, Cuellar J (2019) Securing emergent IoT applications. Springer International Publishing, Cham, pp 99–147. https://doi.org/10.1007/978-3-030-17601-3_3

19.

Kiepuszewski B, ter Hofstede A, van der Aalst W (2003) Fundamentals of control flow in workflows. Acta Inf 39(3):143–209. https://doi.org/10.1007/s00236-002-0105-4

20.

Knorr K (2000) Dynamic access control through petri net workflows. In: 16th annual computer security applications conference (ACSAC 2000), 11–15 December 2000, New Orleans, Louisiana, USA, pp 159–167. https://doi.org/10.1109/ACSAC.2000.898869

21.

Luu L, Chu DH, Olickel H, Saxena P, Hobor A (2016) Making smart contracts smarter. In: Proceedings of the 2016 ACM SIGSAC conference on computer and communications security—CCS’16. ACM Press, New York, pp 254–269. http://dl.acm.org/citation.cfm?doid=2976749.2978309

22.

Mavridou A, Laszka A (2017) Designing secure ethereum smart contracts: a finite state machine based approach

23.

Mavridou A, Laszka A (2018) Tool demonstration: Fsolidm for designing secure ethereum smart contracts. In: Principles of security and trust—7th international conference, POST 2018, held as part of the European joint conferences on theory and practice of software, ETAPS 2018, Thessaloniki, Greece, 14–20 April 2018, Proceedings. pp 270–277. https://doi.org/10.1007/978-3-319-89722-6_11

24.

Mavridou A, Laszka A, Stachtiari E, Dubey A (2019) Verisolid: correct-by-design smart contracts for ethereum. CoRR abs/1901.01292. http://arxiv.org/abs/1901.01292

25.

Modelio—open source tool (2018) Modelio—The open source modeling tool. https://www.modelio.org/. Accessed Aug 2018

26.

Mortensen KH (2000) Automatic code generation method based on coloured petri net models applied on an access control system. In: Nielsen M, Simpson D (eds) Application and theory of petri nets 2000. Springer, Berlin, pp 367–386CrossRef

27.

Murata T (1989) Petri nets: properties, analysis and applications. Proc IEEE 77(4):541–580. http://ieeexplore.ieee.org/document/24143/

28.

Nakamoto S (2008) Bitcoin: a peer-to-peer electronic cash system. https://bitcoin.org/bitcoin.pdf. Accessed Oct 2018

29.

Nakamura H, Miyamoto K, Kudo M (2018) Inter-organizational business processes managed by blockchain. In: Hacid H, Cellary W, Wang H, Paik HY, Zhou R (eds) Web Information Systems Engineering - WISE 2018. Springer International Publishing, Cham, pp 3–17CrossRef

30.

Narayanan A, Bonneau J, Felten E, Miller A, Goldfeder S (2016) Bitcoin and cryptocurrency technologies: a comprehensive introduction. Princeton University Press, Princeton

31.

Petri CA (1966) Communication with automata. http://edoc.sub.uni-hamburg.de/informatik/volltexte/2010/155/

32.

Philippi S (2006) Automatic code generation from high-level petri-nets for model driven systems engineering. J Syst Softw 79(10):1444–1455. http://www.sciencedirect.com/science/article/pii/S0164121205001901, architecting Dependable Systems

33.

Reisig W (1985) Petri nets: an introduction, EATCS monographs on theoretical computer science, vol 4. Springer, Berlin. https://doi.org/10.1007/978-3-642-69968-9

34.

Swan M (2015) Blockchain: blueprint for a new economy. O’Reilly Media, Inc

35.

Szabo N (2001) Smart contracts: building blocks for digital markets, 1996. EXTROPY: J Transhumanist Thought. http://www.fon.hum.uva.nl/rob/Courses/InformationInSpeech/CDROM/Literature/LOTwinterschool2006/szabo.best.vwh.net/smart_contracts_2.html

36.

Tateishi T, Yoshihama S, Sato N, Saito S (2019) Automatic smart contract generation using controlled natural language and template. IBM J Res Dev 1–1

37.

van der Aalst WMP (1997) Verification of workflow nets. In: Lecture notes in computer science (including subseries Lecture notes in artificial intelligence and lecture notes in bioinformatics), vol 1248, pp 407–426. Springer, Berlin. http://link.springer.com/10.1007/3-540-63139-9_48

38.

van der Aalst WMP (1998) The application of Petri nets to workflow management. J Circuit Syst Comput 08(01):21–66. http://www.worldscientific.com/doi/abs/10.1142/S0218126698000043

39.

van der Aalst WMP, van Hee KM, ter Hofstede AHM, Sidorova N, Verbeek HMW, Voorhoeve M, Wynn MT (2011) Soundness of workflow nets: classification, decidability, and analysis. Form Asp Comput 23(3):333–363. https://doi.org/10.1007/s00165-010-0161-4

40.

van der Aalst WM, Ter Hofstede AH (2005) Yawl: yet another workflow language. Inf Syst 30(4):245–275

41.

Weber M, Kindler E (2003) The petri net markup language. Springer, Berlin, pp 124–144. https://doi.org/10.1007/978-3-540-40022-6_7

Titel: Secure Smart Contract Generation Based on Petri Nets
verfasst von: Nejc Zupan
Prabhakaran Kasinathan
Jorge Cuellar
Markus Sauer
Verlag: Springer Singapore
Buch: Blockchain Technology for Industry 4.0
Print ISBN: 978-981-15-1136-3

Electronic ISBN: 978-981-15-1137-0

Copyright-Jahr: 2020
DOI: https://doi.org/10.1007/978-981-15-1137-0_4

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"