{"id":"https://openalex.org/W4414404864","doi":"https://doi.org/10.1109/tse.2025.3605988","title":"ASTRO: Detecting Access Control Vulnerabilities in Smart Contracts via Graph Similarity Comparison","display_name":"ASTRO: Detecting Access Control Vulnerabilities in Smart Contracts via Graph Similarity Comparison","publication_year":2025,"publication_date":"2025-09-22","ids":{"openalex":"https://openalex.org/W4414404864","doi":"https://doi.org/10.1109/tse.2025.3605988"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2025.3605988","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2025.3605988","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Wei Li","orcid":"https://orcid.org/0009-0002-1333-4408"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]},{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Li","raw_affiliation_strings":["School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University"],"raw_orcid":"https://orcid.org/0009-0002-1333-4408","affiliations":[{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","institution_ids":["https://openalex.org/I139024713","https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065097911","display_name":"Yuhong Nan","orcid":"https://orcid.org/0000-0001-9597-9888"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]},{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhong Nan","raw_affiliation_strings":["School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University"],"raw_orcid":"https://orcid.org/0000-0001-9597-9888","affiliations":[{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","institution_ids":["https://openalex.org/I139024713","https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051229944","display_name":"Mingxi Ye","orcid":"https://orcid.org/0009-0004-6708-4074"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]},{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingxi Ye","raw_affiliation_strings":["School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University"],"raw_orcid":"https://orcid.org/0009-0004-6708-4074","affiliations":[{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","institution_ids":["https://openalex.org/I139024713","https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingwen Zhang","orcid":"https://orcid.org/0009-0002-8611-3120"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]},{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingwen Zhang","raw_affiliation_strings":["School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University"],"raw_orcid":"https://orcid.org/0009-0002-8611-3120","affiliations":[{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","institution_ids":["https://openalex.org/I139024713","https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066261600","display_name":"Peilin Zheng","orcid":"https://orcid.org/0000-0002-4897-9276"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]},{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peilin Zheng","raw_affiliation_strings":["School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University"],"raw_orcid":"https://orcid.org/0000-0002-4897-9276","affiliations":[{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","institution_ids":["https://openalex.org/I139024713","https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":null,"display_name":"Zibin Zheng","orcid":"https://orcid.org/0000-0001-7872-7718"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]},{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zibin Zheng","raw_affiliation_strings":["School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University"],"raw_orcid":"https://orcid.org/0000-0001-7872-7718","affiliations":[{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of Blockchain, Sun Yat-sen University, Zhuhai, Guangdong, China","institution_ids":["https://openalex.org/I139024713","https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering and GuangDong Engineering Technology Research Center of BlockchainSun Yat-sen University","institution_ids":["https://openalex.org/I157773358"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9753,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89943651,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"51","issue":"12","first_page":"3267","last_page":"3283"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.8065000176429749},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6352999806404114},{"id":"https://openalex.org/keywords/physical-access","display_name":"Physical access","score":0.47350001335144043},{"id":"https://openalex.org/keywords/smart-contract","display_name":"Smart contract","score":0.4366999864578247},{"id":"https://openalex.org/keywords/normalization","display_name":"Normalization (sociology)","score":0.41999998688697815},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.39890000224113464},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.38429999351501465},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.3772999942302704}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.864799976348877},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8065000176429749},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6352999806404114},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5228000283241272},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.47350001335144043},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.4366999864578247},{"id":"https://openalex.org/C136886441","wikidata":"https://www.wikidata.org/wiki/Q926129","display_name":"Normalization (sociology)","level":2,"score":0.41999998688697815},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.39890000224113464},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.38429999351501465},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.3772999942302704},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.32919999957084656},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.32179999351501465},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.3154999911785126},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3100999891757965},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.28949999809265137},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.28600001335144043},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.27390000224113464},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2736000120639801},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.27300000190734863},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tse.2025.3605988","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2025.3605988","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1849465935","display_name":null,"funder_award_id":"62202510","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6388085866","display_name":null,"funder_award_id":"624B2139","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8094348555","display_name":null,"funder_award_id":"62572497","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2061884904","https://openalex.org/W2074529754","https://openalex.org/W2125260159","https://openalex.org/W2148928830","https://openalex.org/W2165004968","https://openalex.org/W2170607286","https://openalex.org/W2532962075","https://openalex.org/W2539190473","https://openalex.org/W2577142429","https://openalex.org/W2749008552","https://openalex.org/W2846896781","https://openalex.org/W2970809537","https://openalex.org/W2976793204","https://openalex.org/W2982275082","https://openalex.org/W3001458527","https://openalex.org/W3034136313","https://openalex.org/W3084421431","https://openalex.org/W3117923638","https://openalex.org/W3119253238","https://openalex.org/W3134196592","https://openalex.org/W3182763642","https://openalex.org/W4285490412","https://openalex.org/W4285490421","https://openalex.org/W4288057718","https://openalex.org/W4296338325","https://openalex.org/W4308411114","https://openalex.org/W4384154486","https://openalex.org/W4384154487","https://openalex.org/W4384154650","https://openalex.org/W4384302865","https://openalex.org/W4389159643","https://openalex.org/W4393307116","https://openalex.org/W4401361663","https://openalex.org/W4406308708"],"related_works":[],"abstract_inverted_index":{"Smart":[0],"contracts":[1,55,174],"are":[2,72],"programs":[3],"running":[4],"on":[5,57,117,168,229],"blockchains,":[6],"managing":[7],"substantial":[8],"volumes":[9],"of":[10,84,138,146,171,184,227,233],"wealth":[11],"stored":[12],"within":[13],"the":[14,80,144,189,253],"blockchain":[15],"platforms.":[16],"To":[17],"safeguard":[18],"these":[19,70],"assets,":[20],"developers":[21],"design":[22],"and":[23,30,42,79,82,153,155,162,180,210,256],"implement":[24],"access":[25,32,41,50,63,103,129,177,185,251],"control":[26,33,51,64,104,130,178,186],"policies.":[27],"However,":[28,69],"incomplete":[29],"incorrect":[31],"policies":[34,65],"allow":[35],"malicious":[36],"attackers":[37],"to":[38,75,101,111,142,198,248,252],"gain":[39,250],"unauthorized":[40],"exploit":[43],"additional":[44],"assets.":[45],"Previous":[46],"tools":[47,200,207],"for":[48],"detecting":[49],"vulnerabilities":[52,105,131,187],"in":[53,106,208,214],"smart":[54,85,107,173],"rely":[56,116],"predefined":[58],"patterns,":[59],"specifications,":[60],"or":[61],"mining":[62],"from":[66,188],"historical":[67],"transactions.":[68],"methods":[71],"constrained":[73],"due":[74],"their":[76],"predetermined":[77],"nature":[78],"diversity":[81],"complexity":[83],"contracts.":[86,108,140,235],"<p":[87],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[88],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">In":[89],"this":[90],"paper,":[91],"we":[92,159],"present":[93],"<i>ASTRO</i>,":[94],"a":[95,125,136,169,225,230],"new":[96],"framework":[97],"employing":[98],"code":[99,120],"similarity":[100],"detect":[102],"In":[109,221],"contrast":[110],"prior":[112],"approaches":[113],"that":[114,244],"heavily":[115],"predefined,":[118],"vulnerable":[119,242],"samples,":[121],"<i>ASTRO</i>":[122,167,204,223,237],"detects":[123],"whether":[124],"target":[126],"contract":[127,243],"has":[128],"by":[132,216],"comparing":[133],"it":[134],"against":[135],"database":[137],"audited":[139],"Moreover,":[141],"mitigate":[143],"impact":[145],"language-specific":[147],"features":[148],"(e.g.,":[149],"diverse":[150],"conditional":[151],"statements":[152],"modifiers)":[154],"writing":[156],"style":[157],"characteristics,":[158],"integrate":[160],"pruning":[161],"normalization":[163],"techniques.":[164],"We":[165],"evaluate":[166],"total":[170],"22":[172],"with":[175],"assigned":[176],"CVEs":[179],"those":[181],"attacked":[182],"because":[183],"past":[190],"two":[191],"years.":[192],"Evaluation":[193],"results":[194],"demonstrate":[195],"that,":[196],"compared":[197],"state-of-the-art":[199],"(i.e.,":[201],"AChecker,":[202],"SpCon),":[203],"surpasses":[205],"all":[206],"recall":[209,215],"achieves":[211,224],"an":[212],"improvement":[213],"at":[217],"least":[218],"2.8":[219],"times.":[220],"addition,":[222],"precision":[226],"78.33%":[228],"dataset":[231],"consisting":[232],"real-wild":[234],"Furthermore,":[236],"successfully":[238],"identified":[239],"19":[240],"exploitable":[241],"can":[245],"be":[246],"used":[247],"directly":[249],"contract\u2019s":[254],"permissions":[255],"obtain":[257],"benefits.":[258]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}