College of Information Engineering, Yangzhou University, Yangzhou 225127, China.
Research and Development Center for E-Learning, Ministry of Education, Beijing 100039, China.
Sensors (Basel). 2022 May 7;22(9):3577. doi: 10.3390/s22093577.
In the context of the rapid development of blockchain technology, smart contracts have also been widely used in the Internet of Things, finance, healthcare, and other fields. There has been an explosion in the number of smart contracts, and at the same time, the security of smart contracts has received widespread attention because of the financial losses caused by smart contract vulnerabilities. Existing analysis tools can detect many smart contract security vulnerabilities, but because they rely too heavily on hard rules defined by experts when detecting smart contract vulnerabilities, the time to perform the detection increases significantly as the complexity of the smart contract increases. In the present study, we propose a novel hybrid deep learning model named CBGRU that strategically combines different word embedding (Word2Vec, FastText) with different deep learning methods (LSTM, GRU, BiLSTM, CNN, BiGRU). The model extracts features through different deep learning models and combine these features for smart contract vulnerability detection. On the currently publicly available dataset SmartBugs Dataset-Wild, we demonstrate that the CBGRU hybrid model has great smart contract vulnerability detection performance through a series of experiments. By comparing the performance of the proposed model with that of past studies, the CBGRU model has better smart contract vulnerability detection performance.
在区块链技术快速发展的背景下,智能合约也在物联网、金融、医疗等领域得到了广泛应用。智能合约的数量呈爆炸式增长,同时,由于智能合约漏洞导致的财务损失,智能合约的安全性受到了广泛关注。现有的分析工具可以检测到许多智能合约安全漏洞,但由于在检测智能合约漏洞时过于依赖专家定义的硬规则,随着智能合约复杂度的增加,检测时间会显著增加。在本研究中,我们提出了一种名为 CBGRU 的新型混合深度学习模型,该模型巧妙地结合了不同的词嵌入(Word2Vec、FastText)和不同的深度学习方法(LSTM、GRU、BiLSTM、CNN、BiGRU)。该模型通过不同的深度学习模型提取特征,并将这些特征组合起来进行智能合约漏洞检测。在目前公开可用的 SmartBugs Dataset-Wild 数据集上,我们通过一系列实验证明了 CBGRU 混合模型在智能合约漏洞检测方面具有出色的性能。通过将提出的模型与过去研究的性能进行比较,CBGRU 模型在智能合约漏洞检测方面具有更好的性能。