|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/smart-contract-code-weaknesses-and-solutions/
课程评论：没有评论
**课程名称：** 智能合约代码弱点与解决方案 **课程概述：** 本课程旨在全面深入地探讨智能合约的安全漏洞，重点关注**手动代码扫描**和**自动漏洞分析工具**两大方面。课程将涵盖约40种常见的智能合约漏洞，并提供相关的解决方案。此外，课程还将介绍和演示一系列专门用于提升智能合约安全性的**安全相关库**。 **授课语言：** Solidity **目标受众：** * 熟悉其他开发语言但缺乏智能合约开发经验的学习者。 * 希望了解和掌握智能合约安全漏洞的开发者。 **课程内容亮点：** * **全面的漏洞分析：** 深入剖析包括重入攻击（Reentrancy）在内的一系列流行及其他重要安全弱点，并详细解释相关概念和解决方法。 * **实用的代码示例：** 提供课程网站提供的代码样本，结合实际案例讲解漏洞成因和解决方案。 * **开发语言入门：** 包含“Solidity与Remix速成讲座”，帮助非Solidity开发者快速掌握基础知识，并能运行课程中的代码。 * **模式化解决方案：** 明确标注解决问题的通用模式，方便学习者迁移应用。 **使用的工具与库：** * **开发与调试：** Remix * **环境隔离：** Docker * **静态分析与验证：** VeriSol, Slither * **动态分析与模糊测试：** Oyente, Manticore * **通用工具：** DotNetTool * **安全库（OpenZeppelin系列）：** Open Zeppelin Access Control, Open Zeppelin Tokens, Open Zeppelin 本课程将帮助您成为更安全、更可靠的智能合约开发者。
This is a course that focuses both on manually scanning the code vulnerabilities, and bugs through focusing on a large set of (around 40) vulnerabilities for smart contracts and also on automatic vulnerability analysis tools. It also includes several lectures which demonstrate and use security-related libraries which are specifically created to improve the security of smart contracts. The selected development language is Solidity. We have a "Solidity and Remix in a Nutshell Lecture" for students who have a background in other development languages but lack smart contract development experience. This would help them to understand the content and to be able to run provided code parts along with various explanations throughout the course dealing with language/platform-specific issues.The security weaknesses addressed in this course include some popular weaknesses such as Reentrancy but also many others. We visit numerous terms as we explain these problems and related solutions. Whenever we encounter a pattern to solve a problem we explicitly mark this on our slides. We will be looking at code samples which will be provided from the course web site when we discuss the problems and solutions.Finally, the tools and libraries which used in the course either to introduce new tools/libraries or as helper tools are Remix, Docker, VeriSol, DotNetTool, Oyente, Open Zeppelin Access Control, Open Zeppelin Tokens, Open Zeppelin, Manticore, and Slither.
