SRP: An Efficient Runtime Protection Framework for Blockchain-based Smart Contracts

Isra M. Ali*, Noureddine Lasla, Mohamed M. Abdallah, Aiman Erbad

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

6 Citations (Scopus)

Abstract

Runtime-verification of smart contracts ensures the absence of exploitations within a transaction during execution. It is a crucial security aspect that is often omitted due to its high onchain overhead. The lack of runtime-verification in public blockchains allowed attackers to compromise vulnerable contracts and cause significant monetary losses. Although several runtime protection solutions have been proposed, they do not discuss the onchain overhead limitation, which may hinder their deployment and undermine their effectiveness. To address this problem, we propose an efficient Smart contract Runtime Protection framework, called SRP, that minimizes the onchain burden of runtime-verification by integrating an off-chain mechanism with onchain contract execution. The proposed hybrid architecture is designed to protect already-deployed smart contracts from attacks in real-time while maintaining the throughput of the underlying blockchain. We first present SRP from a design perspective proposing a protocol customized for off-chain runtime-verification interoperability. Then, we evaluate our approach empirically and demonstrate the applicability of SRP using a proof-of-concept implementation on a local instance of the Ethereum network. Our empirical and experimental results indicate the feasibility and efficiency of our approach, where SRP outperforms the onchain-only mechanism in terms of service time and throughput, for increasing workloads.

Original languageEnglish
Article number103658
JournalJournal of Network and Computer Applications
Volume216
DOIs
Publication statusPublished - Jul 2023

Keywords

  • Blockchain
  • Concurrent execution
  • Off-chain processing
  • Runtime verification
  • Smart contract

Fingerprint

Dive into the research topics of 'SRP: An Efficient Runtime Protection Framework for Blockchain-based Smart Contracts'. Together they form a unique fingerprint.

Cite this