Image de couverture de livre

Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We?

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Li, Kaixuan, Xue, Yue, Chen, Sen, Liu, Han, Sun, Kairan, Hu, Ming, Wang, Haijun, Liu, Yang, Chen, Yixiang
Format:	Preprint
Publié:	2024
Sujets:	Software Engineering
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

A Comprehensive Study on Static Application Security Testing (SAST) Tools for Android
par: Zhu, Jingyun, et autres
Publié: (2024)

When ChatGPT Meets Smart Contract Vulnerability Detection: How Far Are We?
par: Chen, Chong, et autres
Publié: (2023)

Detecting State Manipulation Vulnerabilities in Smart Contracts Using LLM and Static Analysis
par: Wu, Hao, et autres
Publié: (2025)

Smart Contract Fuzzing Towards Profitable Vulnerabilities
par: Kong, Ziqiao, et autres
Publié: (2025)

PatchFinder: A Two-Phase Approach to Security Patch Tracing for Disclosed Vulnerabilities in Open-Source Software
par: Li, Kaixuan, et autres
Publié: (2024)

ACFIX: Guiding LLMs with Mined Common RBAC Practices for Context-Aware Repair of Access Control Vulnerabilities in Smart Contracts
par: Zhang, Lyuye, et autres
Publié: (2024)

Deep Learning Framework Testing via Model Mutation: How Far Are We?
par: Mu, Yanzhou, et autres
Publié: (2025)

Vulnerability-Affected Versions Identification: How Far Are We?
par: Chen, Xingchu, et autres
Publié: (2025)

Automated Testing of Task-based Chatbots: How Far Are We?
par: Clerissi, Diego, et autres
Publié: (2026)

Identifying Smart Contract Security Issues in Code Snippets from Stack Overflow
par: Chen, Jiachi, et autres
Publié: (2024)

ContractTrace: Retracing Smart Contract Versions for Security Analyses
par: Mbodji, Fatou Ndiaye, et autres
Publié: (2024)

GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis
par: Sun, Yuqiang, et autres
Publié: (2023)

An Extensive Comparison of Static Application Security Testing Tools
par: Esposito, Matteo, et autres
Publié: (2024)

Retrieval-Augmented Test Generation: How Far Are We?
par: Shin, Jiho, et autres
Publié: (2024)

Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers
par: Wu, Shuohan, et autres
Publié: (2024)

Duplicate Bug Report Detection: How Far Are We?
par: Zhang, Ting, et autres
Publié: (2022)

Using LLMs for Security Advisory Investigations: How Far Are We?
par: Abdullah, Bayu Fedra, et autres
Publié: (2025)

A Large-Scale Evaluation for Log Parsing Techniques: How Far Are We?
par: Jiang, Zhihan, et autres
Publié: (2023)

Trace: Securing Smart Contract Repository Against Access Control Vulnerability
par: Chen, Chong, et autres
Publié: (2025)

Large Language Models for Equivalent Mutant Detection: How Far Are We?
par: Tian, Zhao, et autres
Publié: (2024)

Reasoning Runtime Behavior of a Program with LLM: How Far Are We?
par: Chen, Junkai, et autres
Publié: (2024)

Demystifying Invariant Effectiveness for Securing Smart Contracts
par: Chen, Zhiyang, et autres
Publié: (2024)

Effective Targeted Testing of Smart Contracts
par: Fooladgar, Mahdi, et autres
Publié: (2024)

DeepFWI: Identifying Bug-Sensitive Warnings with Multi-Modal Code-Warning Semantics
par: Liu, Han, et autres
Publié: (2024)

Demystifying the Characteristics for Smart Contract Upgrades
par: Liu, Ye, et autres
Publié: (2024)

Combining Fine-Tuning and LLM-based Agents for Intuitive Smart Contract Auditing with Justifications
par: Ma, Wei, et autres
Publié: (2024)

Vulnerability Detection with Code Language Models: How Far Are We?
par: Ding, Yangruibo, et autres
Publié: (2024)

Understanding Inconsistent State Update Vulnerabilities in Smart Contracts
par: Li, Lantian, et autres
Publié: (2025)

SmartIntentNN: Towards Smart Contract Intent Detection
par: Huang, Youwei, et autres
Publié: (2022)

Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners?
par: Chaliasos, Stefanos, et autres
Publié: (2023)

Smart Contract Vulnerability Detection based on Static Analysis and Multi-Objective Search
par: Li, Dongcheng, et autres
Publié: (2024)

Can AI Agents Generate Microservices? How Far are We?
par: Adnan, Bassam, et autres
Publié: (2026)

Representation Learning for Stack Overflow Posts: How Far are We?
par: He, Junda, et autres
Publié: (2023)

Towards Secure Program Partitioning for Smart Contracts with LLM's In-Context Learning
par: Liu, Ye, et autres
Publié: (2025)

Deep Smart Contract Intent Detection
par: Huang, Youwei, et autres
Publié: (2022)

Comparison of Static Application Security Testing Tools and Large Language Models for Repo-level Vulnerability Detection
par: Zhou, Xin, et autres
Publié: (2024)

SmartAxe: Detecting Cross-Chain Vulnerabilities in Bridge Smart Contracts via Fine-Grained Static Analysis
par: Liao, Zeqin, et autres
Publié: (2024)

Model Editing for LLMs4Code: How Far are We?
par: Li, Xiaopeng, et autres
Publié: (2024)

Measuring Emergent Capabilities of LLMs for Software Engineering: How Far Are We?
par: O'Brien, Conor, et autres
Publié: (2024)

Automating Comment Generation for Smart Contract from Bytecode
par: Xiang, Jianhang, et autres
Publié: (2025)