Extended Abstract of Combine Sliced Joint Graph with Graph Neural Networks for Smart Contract Vulnerability Detection

被引:0
作者
Cai, Jie [1 ]
Li, Bin [1 ]
Zhang, Jiale [1 ]
Sun, Xiaobing [1 ]
Chen, Bing [2 ]
机构
[1] Yangzhou Univ, Sch Informat Engn, Yangzhou, Jiangsu, Peoples R China
[2] Nanjing Univ Aeronaut & Astronaut, Coll Comp Sci & Technol, Nanjing, Peoples R China
来源
2023 IEEE INTERNATIONAL CONFERENCE ON SOFTWARE ANALYSIS, EVOLUTION AND REENGINEERING, SANER | 2023年
关键词
Smart Contract; Vulnerability Detection; Code Representation; Graph Neural Network;
D O I
10.1109/SANER56733.2023.00101
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Existing smart contract vulnerability detection efforts heavily rely on fixed rules defined by experts, which are inefficient and inflexible. To overcome the limitations of existing vulnerability detection approaches, we propose a GNN based approach. First, we construct a graph representation for a smart contract function with syntactic and semantic features by combining abstract syntax tree (AST), control flow graph (CFG), and program dependency graph (PDG). To further strengthen the presentation ability of our approach, we perform program slicing to normalize the graph and eliminate the redundant information unrelated to vulnerabilities. Then, we use a Bidirectional Gated Graph Neural-Network model with hybrid attention pooling to identify potential vulnerabilities in smart contract functions. Experiment results show that our approach can achieve 89.2% precision and 92.9% recall in smart contract vulnerability detection on our dataset and reveal the effectiveness and efficiency of our approach.
引用
收藏
页码:851 / 852
页数:2
相关论文
共 12 条
[1]  
Alt L., 2018, SMT BASED VERIFICATI, P376
[2]   Slither: A Static Analysis Framework For Smart Contracts [J].
Feist, Josselin ;
Greico, Gustavo ;
Groce, Alex .
2019 IEEE/ACM 2ND INTERNATIONAL WORKSHOP ON EMERGING TRENDS IN SOFTWARE ENGINEERING FOR BLOCKCHAIN (WETSEB 2019), 2019, :8-15
[3]   Reliable Task Management Based on a Smart Contract for Runtime Verification of Sensing and Actuating Tasks in IoT Environments [J].
Hang, Lei ;
Kim, Do-Hyeun .
SENSORS, 2020, 20 (04)
[4]   Making Smart Contracts Smarter [J].
Luu, Loi ;
Chu, Duc-Hiep ;
Olickel, Hrishi ;
Saxena, Prateek ;
Hobor, Aquinas .
CCS'16: PROCEEDINGS OF THE 2016 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, 2016, :254-269
[5]  
Mueller B., 2018, HITB SECCONF AMSTERD, V9, P54
[6]   Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models [J].
Qian, Peng ;
Liu, Zhenguang ;
He, Qinming ;
Zimmermann, Roger ;
Wang, Xun .
IEEE ACCESS, 2020, 8 :19685-19695
[7]  
Tann A, 2018, arXiv preprint arXiv:1811.06632, P1371
[8]   SmartCheck: Static Analysis of Ethereum Smart Contracts [J].
Tikhomirov, Sergei ;
Voskresenskaya, Ekaterina ;
Ivanitskiy, Ivan ;
Takhaviev, Ramil ;
Marchenko, Evgeny ;
Alexandrov, Yaroslav .
2018 IEEE/ACM 1ST INTERNATIONAL WORKSHOP ON EMERGING TRENDS IN SOFTWARE ENGINEERING FOR BLOCKCHAIN (WETSEB), 2018, :9-16
[9]   SECURIFY: Practical Security Analysis of Smart Contracts [J].
Tsankov, Petar ;
Dan, Andrei ;
Drachsler-Cohen, Dana ;
Gervais, Arthur ;
Bunzli, Florian ;
Vechev, Martin .
PROCEEDINGS OF THE 2018 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY (CCS'18), 2018, :67-82
[10]   Peculiar: Smart Contract Vulnerability Detection Based on Crucial Data Flow Graph and Pre-training Techniques [J].
Wu, Hongjun ;
Zhang, Zhuo ;
Wang, Shangwen ;
Lei, Yan ;
Lin, Bo ;
Qin, Yihao ;
Zhang, Haoyu ;
Mao, Xiaoguang .
2021 IEEE 32ND INTERNATIONAL SYMPOSIUM ON SOFTWARE RELIABILITY ENGINEERING (ISSRE 2021), 2021, :378-389