Smart Contract Vulnerability Detection Based on Deep Learning and Multimodal Decision Fusion

被引:14
作者
Deng, Weichu [1 ]
Wei, Huanchun [2 ]
Huang, Teng [1 ]
Cao, Cong [1 ]
Peng, Yun [1 ]
Hu, Xuan [3 ,4 ]
机构
[1] Guangzhou Univ, Inst Artificial Intelligence & Blockchain, Guangzhou 510006, Peoples R China
[2] Guangxi Univ Informat Engn, Sch Beidou, Nanning 530299, Peoples R China
[3] Informat Secur Res Ctr, CEPREI Lab, Guangzhou 510610, Peoples R China
[4] Minist Ind & Informat Technol, Key Lab, Guangzhou 510610, Peoples R China
基金
中国国家自然科学基金;
关键词
multimodal fusion; smart contract; vulnerability detection; deep learning; CHALLENGES;
D O I
10.3390/s23167246
中图分类号
O65 [分析化学];
学科分类号
070302 ; 081704 ;
摘要
With the rapid development and widespread application of blockchain technology in recent years, smart contracts running on blockchains often face security vulnerability problems, resulting in significant economic losses. Unlike traditional programs, smart contracts cannot be modified once deployed, and vulnerabilities cannot be remedied. Therefore, the vulnerability detection of smart contracts has become a research focus. Most existing vulnerability detection methods are based on rules defined by experts, which are inefficient and have poor scalability. Although there have been studies using machine learning methods to extract contract features for vulnerability detection, the features considered are singular, and it is impossible to fully utilize smart contract information. In order to overcome the limitations of existing methods, this paper proposes a smart contract vulnerability detection method based on deep learning and multimodal decision fusion. This method also considers the code semantics and control structure information of smart contracts. It integrates the source code, operation code, and control-flow modes through the multimodal decision fusion method. The deep learning method extracts five features used to represent contracts and achieves high accuracy and recall rates. The experimental results show that the detection accuracy of our method for arithmetic vulnerability, re-entrant vulnerability, transaction order dependence, and Ethernet locking vulnerability can reach 91.6%, 90.9%, 94.8%, and 89.5%, respectively, and the detected AUC values can reach 0.834, 0.852, 0.886, and 0.825, respectively. This shows that our method has a good vulnerability detection effect. Furthermore, ablation experiments show that the multimodal decision fusion method contributes significantly to the fusion of different modalities.
引用
收藏
页数:21
相关论文
共 70 条
[1]  
Agarwal Shantanu, 2022, Computing, Communication and Learning: First International Conference, CoCoLe 2022, Proceedings. Communications in Computer and Information Science (1729), P65, DOI 10.1007/978-3-031-21750-0_6
[2]  
Akter M S., 2022, Inernational Conference on Ubiquitous Security, P83
[3]   Super-optimization of Smart Contracts [J].
Albert, Elvira ;
Gordillo, Pablo ;
Hernandez-Cerezo, Alejandro ;
Rubio, Albert ;
Schett, Maria A. .
ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY, 2022, 31 (04)
[4]  
Alghowinem Sharifa, 2015, IEEE Int Conf Autom Face Gesture Recognit Workshops, V1, DOI 10.1109/FG.2015.7163113
[5]  
[Anonymous], 2023, CVE
[6]  
[Anonymous], 2023, MYTHR
[7]  
[Anonymous], 2023, PAR WALL HACK EXPL
[8]  
[Anonymous], 2023, ETH SMART CONTR BEST
[9]  
[Anonymous], 2023, Species Fungorum
[10]  
[Anonymous], 2013, Efficient estimation of word representations in vector space