Suppr超能文献

基于深度学习和多模态决策融合的智能合约漏洞检测

Smart Contract Vulnerability Detection Based on Deep Learning and Multimodal Decision Fusion.

作者信息

Deng Weichu, Wei Huanchun, Huang Teng, Cao Cong, Peng Yun, Hu Xuan

机构信息

Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou 510006, China.

School of Beidou, Guangxi University of Information Engineering, Nanning 530299, China.

出版信息

Sensors (Basel). 2023 Aug 18;23(16):7246. doi: 10.3390/s23167246.

Abstract

With the rapid development and widespread application of blockchain technology in recent years, smart contracts running on blockchains often face security vulnerability problems, resulting in significant economic losses. Unlike traditional programs, smart contracts cannot be modified once deployed, and vulnerabilities cannot be remedied. Therefore, the vulnerability detection of smart contracts has become a research focus. Most existing vulnerability detection methods are based on rules defined by experts, which are inefficient and have poor scalability. Although there have been studies using machine learning methods to extract contract features for vulnerability detection, the features considered are singular, and it is impossible to fully utilize smart contract information. In order to overcome the limitations of existing methods, this paper proposes a smart contract vulnerability detection method based on deep learning and multimodal decision fusion. This method also considers the code semantics and control structure information of smart contracts. It integrates the source code, operation code, and control-flow modes through the multimodal decision fusion method. The deep learning method extracts five features used to represent contracts and achieves high accuracy and recall rates. The experimental results show that the detection accuracy of our method for arithmetic vulnerability, re-entrant vulnerability, transaction order dependence, and Ethernet locking vulnerability can reach 91.6%, 90.9%, 94.8%, and 89.5%, respectively, and the detected AUC values can reach 0.834, 0.852, 0.886, and 0.825, respectively. This shows that our method has a good vulnerability detection effect. Furthermore, ablation experiments show that the multimodal decision fusion method contributes significantly to the fusion of different modalities.

摘要

近年来,随着区块链技术的快速发展和广泛应用,运行在区块链上的智能合约经常面临安全漏洞问题,导致重大经济损失。与传统程序不同,智能合约一旦部署就无法修改,漏洞也无法补救。因此,智能合约的漏洞检测已成为研究热点。现有的大多数漏洞检测方法基于专家定义的规则,效率低下且扩展性差。虽然已有研究使用机器学习方法提取合约特征进行漏洞检测,但所考虑的特征单一,无法充分利用智能合约信息。为克服现有方法的局限性,本文提出一种基于深度学习和多模态决策融合的智能合约漏洞检测方法。该方法还考虑了智能合约的代码语义和控制结构信息。它通过多模态决策融合方法整合了源代码、操作码和控制流模式。深度学习方法提取了五个用于表示合约的特征,并实现了较高的准确率和召回率。实验结果表明,我们的方法对算术漏洞、重入漏洞、交易顺序依赖和以太坊锁定漏洞的检测准确率分别可达91.6%、90.9%、94.8%和89.5%,检测得到的AUC值分别可达0.834、0.852、0.886和0.825。这表明我们的方法具有良好的漏洞检测效果。此外,消融实验表明多模态决策融合方法对不同模态的融合有显著贡献。

https://cdn.ncbi.nlm.nih.gov/pmc/blobs/a597/10459372/fae5fe0a7d0f/sensors-23-07246-g001.jpg

文献AI研究员

20分钟写一篇综述,助力文献阅读效率提升50倍。

立即体验

用中文搜PubMed

大模型驱动的PubMed中文搜索引擎

马上搜索

文档翻译

学术文献翻译模型,支持多种主流文档格式。

立即体验