{"id":"https://openalex.org/W4410985514","doi":"https://doi.org/10.1109/tdsc.2025.3576114","title":"BridgeGuard: Checking External Interaction Vulnerabilities in Cross-Chain Bridge Router Contracts Based on Symbolic Dataflow Analysis","display_name":"BridgeGuard: Checking External Interaction Vulnerabilities in Cross-Chain Bridge Router Contracts Based on Symbolic Dataflow Analysis","publication_year":2025,"publication_date":"2025-06-03","ids":{"openalex":"https://openalex.org/W4410985514","doi":"https://doi.org/10.1109/tdsc.2025.3576114"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3576114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3576114","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007959279","display_name":"Zequan Zhou","orcid":"https://orcid.org/0000-0001-6290-2171"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zequan Zhou","raw_affiliation_strings":["School of Electronic and Information Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6290-2171","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030989565","display_name":"Xiling Luo","orcid":"https://orcid.org/0000-0002-3443-6940"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiling Luo","raw_affiliation_strings":["School of Electronic and Information Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3443-6940","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109798528","display_name":"Xiaohai Ji","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohai Ji","raw_affiliation_strings":["School of Electronic and Information Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089061086","display_name":"Jian Mao","orcid":"https://orcid.org/0000-0002-0404-6466"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Mao","raw_affiliation_strings":["The School of Cyber Science and Technology, Beihang University, Beijing, China","Hangzhou Innovation Institute, Beihang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0404-6466","affiliations":[{"raw_affiliation_string":"The School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"Hangzhou Innovation Institute, Beihang University, Hangzhou, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113669598","display_name":"Ting He","orcid":"https://orcid.org/0009-0001-0015-8444"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ting He","raw_affiliation_strings":["School of Electronic and Information Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-0015-8444","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087512001","display_name":"Junjun Wang","orcid":"https://orcid.org/0000-0001-9791-6717"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junjun Wang","raw_affiliation_strings":["School of Electronic and Information Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9791-6717","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022955566","display_name":"Qianhong Wu","orcid":"https://orcid.org/0000-0002-6407-4194"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianhong Wu","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6407-4194","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I82880672"],"apc_list":null,"apc_paid":null,"fwci":1.6668,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.82050524,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"22","issue":"5","first_page":"5798","last_page":"5812"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9401000142097473,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9401000142097473,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.930400013923645,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dataflow","display_name":"Dataflow","score":0.8515782356262207},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.795748233795166},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.5609987378120422},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.547123372554779},{"id":"https://openalex.org/keywords/chain","display_name":"Chain (unit)","score":0.44000792503356934},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.31312495470046997},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2843778431415558}],"concepts":[{"id":"https://openalex.org/C96324660","wikidata":"https://www.wikidata.org/wiki/Q205446","display_name":"Dataflow","level":2,"score":0.8515782356262207},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.795748233795166},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.5609987378120422},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.547123372554779},{"id":"https://openalex.org/C199185054","wikidata":"https://www.wikidata.org/wiki/Q552299","display_name":"Chain (unit)","level":2,"score":0.44000792503356934},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.31312495470046997},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2843778431415558},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C1276947","wikidata":"https://www.wikidata.org/wiki/Q333","display_name":"Astronomy","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3576114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3576114","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2079473452","display_name":null,"funder_award_id":"U24B20144","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2134957591","display_name":null,"funder_award_id":"62172027","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4397995466","display_name":null,"funder_award_id":"62272464","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8043645915","display_name":null,"funder_award_id":"U24B20117","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2539190473","https://openalex.org/W2790202156","https://openalex.org/W2805052744","https://openalex.org/W2846896781","https://openalex.org/W2908007588","https://openalex.org/W2963465913","https://openalex.org/W2970809537","https://openalex.org/W2979467439","https://openalex.org/W2989657022","https://openalex.org/W2999378142","https://openalex.org/W3008357810","https://openalex.org/W3128660473","https://openalex.org/W3155016995","https://openalex.org/W3180630398","https://openalex.org/W3189699165","https://openalex.org/W3201257237","https://openalex.org/W4206712151","https://openalex.org/W4226292196","https://openalex.org/W4285060547","https://openalex.org/W4288057718","https://openalex.org/W4292972043","https://openalex.org/W4297140026","https://openalex.org/W4297310218","https://openalex.org/W4313563932","https://openalex.org/W4316661173","https://openalex.org/W4321354064","https://openalex.org/W4378908288","https://openalex.org/W4384009646","https://openalex.org/W4384471383","https://openalex.org/W4385255219","https://openalex.org/W4399511400","https://openalex.org/W4399881388"],"related_works":["https://openalex.org/W2293118914","https://openalex.org/W2998381397","https://openalex.org/W4236419692","https://openalex.org/W2171015181","https://openalex.org/W3167919718","https://openalex.org/W4251718783","https://openalex.org/W4239447582","https://openalex.org/W1484403103","https://openalex.org/W2521947294","https://openalex.org/W2907307640"],"abstract_inverted_index":{"Cross-chain":[0],"bridges":[1],"connect":[2],"two":[3,36,103,185],"heterogeneous":[4],"and":[5,44,70,97,129,143],"independent":[6],"blockchains,":[7],"in":[8,30],"which":[9,54],"router":[10,31],"contracts":[11,56,169],"interact":[12],"with":[13,170],"external":[14,26],"modules":[15],"to":[16,124,149],"perform":[17],"functions,":[18],"e.g.,":[19],"locking":[20],"assets.":[21],"However,":[22],"numerous":[23],"attacks":[24,96],"exploit":[25],"interaction":[27],"vulnerabilities":[28],"(EIVs)":[29],"contracts.":[32],"Detecting":[33],"EIVs":[34],"presents":[35],"key":[37],"challenges:":[38],"(1)":[39],"extracting":[40],"complete":[41,126],"data":[42,71,74,131],"dependencies,":[43],"(2)":[45],"identifying":[46],"access":[47],"controls":[48],"for":[49,60,113,140,165],"off-chain":[50,141],"entities.":[51],"Existing":[52],"approaches,":[53],"transform":[55],"into":[57],"intermediate":[58],"representations":[59],"analysis,":[61],"often":[62],"miss":[63],"critical":[64],"execution":[65,127],"logic":[66,128],"(e.g.,":[67,73],"path":[68,83,152],"conditions)":[69],"flows":[72,75],"at":[76],"the":[77,82,99,151],"instruction":[78],"parameter":[79],"level).":[80],"Additionally,":[81],"explosion":[84],"severely":[85],"impacts":[86],"analysis":[87,111,122,158],"efficiency.":[88],"In":[89],"this":[90],"paper,":[91],"we":[92,117],"systematically":[93],"analyze":[94],"real-world":[95],"extract":[98],"precise":[100],"features":[101],"of":[102,174],"typical":[104,186],"EIVs.":[105,115],"We":[106,133,154],"propose":[107],"BridgeGuard,":[108],"a":[109,119,145],"static":[110],"framework":[112],"detecting":[114,184],"Specifically,":[116],"present":[118],"symbolic":[120],"dataflow":[121],"approach":[123],"capture":[125],"fine-grained":[130],"flows.":[132],"then":[134],"identify":[135],"three":[136],"common":[137],"authentication":[138],"patterns":[139],"entities":[142],"deploy":[144],"heuristic-driven":[146],"pruning":[147],"method":[148],"solve":[150],"explosion.":[153],"implement":[155],"an":[156,171],"automated":[157],"prototype.":[159],"The":[160],"experimental":[161],"results":[162],"show":[163],"that":[164],"analyzing":[166],"1,035":[167],"wild":[168],"average":[172,180],"scale":[173],"15,914":[175],"bytes,":[176],"BridgeGuard":[177,188],"achieves":[178,189],"87.4%":[179],"code":[181],"coverage.":[182],"For":[183],"EIVs,":[187],"F1-scores":[190],"above":[191],"0.93.":[192]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}