论文标题
SMAC：智能合约访问控制服务
SMACS: Smart Contract Access Control Service
论文作者
论文摘要
尽管基于区块链的智能合约承诺，即使有货币后果，也有一种``无信任的''执行协议的方式，但它们遭受了多个安全问题的困扰。这些问题中的许多问题都可以通过有效的访问控制系统来缓解，但是，由于当前的区块链平台的特性（例如缺乏隐私，昂贵的链上资源或延迟），其实现挑战。为了解决此问题，我们提出了SMACS框架，可以以低成本来实现智能合约的可更新和复杂的访问控制规则（ACR）}。 SMACS将昂贵的ACR验证和管理操作的负担转移到链链基础架构上，同时仅实施仅链中的轻巧代币访问控制。 SMAC是灵活的，除了简单的访问控制列表外，还可以轻松实施规则，以增强智能合约的运行时安全性。借助由漏洞检测工具支持的专用ACR，SMAC可以在部署后保护脆弱的合同。我们完全实施SMAC并评估它。
Although blockchain-based smart contracts promise a ``trustless'' way of enforcing agreements even with monetary consequences, they suffer from multiple security issues. Many of these issues could be mitigated via an effective access control system, however, its realization is challenging due to the properties of current blockchain platforms (like lack of privacy, costly on-chain resources, or latency). To address this problem, we propose the SMACS framework, where updatable and sophisticated Access Control Rules (ACRs)} for smart contracts can be realized with low cost. SMACS shifts the burden of expensive ACRs validation and management operations to an off-chain infrastructure, while implementing on-chain only lightweight token-based access control. SMACS is flexible and in addition to simple access control lists can easily implement rules enhancing the runtime security of smart contracts. With dedicated ACRs backed by vulnerability-detection tools, SMACS can protect vulnerable contracts after deployment. We fully implement SMACS and evaluate it.
