A Smart Contract Vulnerability Detection Method Based on Heterogeneous Contract Semantic Graphs and Pre-Training Techniques

被引:0
作者
Zhang, Jie [1 ]
Lu, Gehao [1 ]
Yu, Jia [1 ]
机构
[1] Yunnan Univ, Sch Informat Sci & Engn, Kunming 650500, Peoples R China
关键词
smartcontracts; vulnerability detection; heterogeneous contract semantic graphs; pre-training techniques;
D O I
10.3390/electronics13183786
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The use of smart contracts in areas such as finance, supply chain management, and the Internet of Things has significantly advanced blockchain technology. However, once deployed on the blockchain, smart contracts cannot be modified or revoked. Any vulnerabilities can lead to severe economic losses and data breaches, making pre-deployment vulnerability detection critically important. Traditional smart contract vulnerability detection methods suffer from low accuracy and limited reusability across different scenarios. To enhance detection capabilities, this paper proposes a smart contract vulnerability detection method based on heterogeneous contract semantic graphs and pre-training techniques. Compared to the conventional graph structures used in existing methods, heterogeneous contract semantic graphs contain richer contract information. By integrating these with pre-trained models, our method exhibits stronger vulnerability capture and generalization capabilities. Experimental results show that this method has improved the accuracy, recall, precision, and F1 value in the detection of four widely existing and harmful smart contract vulnerabilities compared with existing methods, which greatly improves the detection ability of smart contract vulnerabilities.
引用
收藏
页数:22
相关论文
共 40 条
[1]  
Allamanis M., 2018, ICLR
[2]  
Antonopoulos A., 2018, Mastering Ethereum: Building Smart Contracts and DApps, P177
[3]  
Buratti L, 2020, Arxiv, DOI arXiv:2006.12641
[4]   Defining Smart Contract Defects on Ethereum [J].
Chen, Jiachi ;
Xia, Xin ;
Lo, David ;
Grundy, John ;
Luo, Xiapu ;
Chen, Ting .
IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 2022, 48 (01) :327-345
[5]  
Chung JY, 2014, Arxiv, DOI [arXiv:1412.3555, DOI 10.48550/ARXIV.1412.3555]
[6]  
Cui Zhan-Qi, 2024, Journal of Software, V35, P2235, DOI 10.13328/j.cnki.jos.007046
[7]  
Devlin J, 2019, 2019 CONFERENCE OF THE NORTH AMERICAN CHAPTER OF THE ASSOCIATION FOR COMPUTATIONAL LINGUISTICS: HUMAN LANGUAGE TECHNOLOGIES (NAACL HLT 2019), VOL. 1, P4171
[8]  
di Angelo M, 2023, Arxiv, DOI [arXiv:2304.11624, 10.48550/arXiv.2304.11624, DOI 10.48550/ARXIV.2304.11624]
[9]  
docs.soliditylang, 2023, Ethereum Units and Globally Available Variables
[10]   metapath2vec: Scalable Representation Learning for Heterogeneous Networks [J].
Dong, Yuxiao ;
Chawla, Nitesh V. ;
Swami, Ananthram .
KDD'17: PROCEEDINGS OF THE 23RD ACM SIGKDD INTERNATIONAL CONFERENCE ON KNOWLEDGE DISCOVERY AND DATA MINING, 2017, :135-144