HyWE: A Hybrid Word Embedding Method for Smart Contract Vulnerability Detection

被引:0
作者
Chen, Jinfu [1 ,2 ]
Li, Zhehao [1 ]
Wang, Dongjie [1 ]
机构
[1] Jiangsu Univ, Sch Comp Sci & Commun Engn, Zhenjiang, Jiangsu, Peoples R China
[2] Jiangsu Univ, Jiangsu Key Lab Secur Technol Ind Cyberspace, Zhenjiang, Jiangsu, Peoples R China
来源
2024 IEEE 35TH INTERNATIONAL SYMPOSIUM ON SOFTWARE RELIABILITY ENGINEERING WORKSHOPS, ISSREW | 2024年
基金
国家重点研发计划; 中国博士后科学基金; 中国国家自然科学基金;
关键词
Smart contract; Vulnerability detection; Self attention mechanism; Word Embedding;
D O I
10.1109/ISSREW63542.2024.00075
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
With the rise of blockchain technology, the use of smart contracts has increased, alongside challenges in detecting and addressing unknown vulnerabilities. Existing systems face limitations, including inadequate manual testing and flaws in automated tools. To improve smart contract security, this study introduces a Hybrid Word Embedding (HyWE) method that combines Word2Vec, FastText, and GloVe models, augmented by a channel self-attention mechanism for enhanced feature extraction in the field of deep learning smart contract vulnerability detection. HyWE captures semantic and contextual relationships in code more accurately, aiding in precise vulnerability detection. The method involves preprocessing smart contract data, extracting features with various embeddings, and applying self-attention to highlight critical features. Applied within the SCVD-SA framework, HyWE's performance was evaluated experimentally, demonstrating superior accuracy and efficiency in vulnerability detection. This method is intuitive but effective, and can be easily adapted to other models, increasing performance.
引用
收藏
页码:179 / 186
页数:8
相关论文
共 27 条
[1]  
Harer JA, 2018, Arxiv, DOI arXiv:1803.04497
[2]   A blockchain future for internet of things security: a position paper [J].
Banerjee, Mandrita ;
Lee, Junghee ;
Choo, Kim-Kwang Raymond .
DIGITAL COMMUNICATIONS AND NETWORKS, 2018, 4 (03) :149-160
[3]  
Chia V., IEEE INT C INT THING
[4]  
Clarke EM, 2008, LECT NOTES COMPUT SC, V5000, P196
[5]   Slither: A Static Analysis Framework For Smart Contracts [J].
Feist, Josselin ;
Greico, Gustavo ;
Groce, Alex .
2019 IEEE/ACM 2ND INTERNATIONAL WORKSHOP ON EMERGING TRENDS IN SOFTWARE ENGINEERING FOR BLOCKCHAIN (WETSEB 2019), 2019, :8-15
[6]   SemGloVe: Semantic Co-Occurrences for GloVe From BERT [J].
Gan, Leilei ;
Teng, Zhiyang ;
Zhang, Yue ;
Zhu, Linchao ;
Wu, Fei ;
Yang, Yi .
IEEE-ACM TRANSACTIONS ON AUDIO SPEECH AND LANGUAGE PROCESSING, 2022, 30 :2696-2704
[7]   A Semantic Framework for the Security Analysis of Ethereum Smart Contracts [J].
Grishchenko, Ilya ;
Maffei, Matteo ;
Schneidewind, Clara .
PRINCIPLES OF SECURITY AND TRUST, POST 2018, 2018, 10804 :243-269
[8]   Poster: Toward A Code Pattern Based Vulnerability Measurement Model [J].
Heaps, John ;
Slavin, Rocky ;
Wang, Xiaoyin .
SACMAT'18: PROCEEDINGS OF THE 23RD ACM SYMPOSIUM ON ACCESS CONTROL MODELS & TECHNOLOGIES, 2018, :209-211
[9]  
Hofstätter S, 2019, LECT NOTES COMPUT SC, V11437, P810, DOI 10.1007/978-3-030-15712-8_57
[10]   ContractFuzzer: Fuzzing Smart Contracts for Vulnerability Detection [J].
Jiang, Bo ;
Liu, Ye ;
Chan, W. C. .
PROCEEDINGS OF THE 2018 33RD IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMTED SOFTWARE ENGINEERING (ASE' 18), 2018, :259-269