Smart Contract Vulnerability Detection Based on Deep Learning and Multimodal Decision Fusion

Author:

Deng Weichu1ORCID,Wei Huanchun2,Huang Teng1,Cao Cong1,Peng Yun1,Hu Xuan34

Affiliation:

1. Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou 510006, China

2. School of Beidou, Guangxi University of Information Engineering, Nanning 530299, China

3. Information Security Research Center, CEPREI Laboratory, Guangzhou 510610, China

4. Key Laboratory of Ministry of Industry and Information Technology, Guangzhou 510610, China

Abstract

With the rapid development and widespread application of blockchain technology in recent years, smart contracts running on blockchains often face security vulnerability problems, resulting in significant economic losses. Unlike traditional programs, smart contracts cannot be modified once deployed, and vulnerabilities cannot be remedied. Therefore, the vulnerability detection of smart contracts has become a research focus. Most existing vulnerability detection methods are based on rules defined by experts, which are inefficient and have poor scalability. Although there have been studies using machine learning methods to extract contract features for vulnerability detection, the features considered are singular, and it is impossible to fully utilize smart contract information. In order to overcome the limitations of existing methods, this paper proposes a smart contract vulnerability detection method based on deep learning and multimodal decision fusion. This method also considers the code semantics and control structure information of smart contracts. It integrates the source code, operation code, and control-flow modes through the multimodal decision fusion method. The deep learning method extracts five features used to represent contracts and achieves high accuracy and recall rates. The experimental results show that the detection accuracy of our method for arithmetic vulnerability, re-entrant vulnerability, transaction order dependence, and Ethernet locking vulnerability can reach 91.6%, 90.9%, 94.8%, and 89.5%, respectively, and the detected AUC values can reach 0.834, 0.852, 0.886, and 0.825, respectively. This shows that our method has a good vulnerability detection effect. Furthermore, ablation experiments show that the multimodal decision fusion method contributes significantly to the fusion of different modalities.

Funder

National Natural Science Foundation of China

NSF of Guangdong Province

the Key Laboratory, Ministry of Industry and Information Technology, China

Publisher

MDPI AG

Subject

Electrical and Electronic Engineering,Biochemistry,Instrumentation,Atomic and Molecular Physics, and Optics,Analytical Chemistry

Cited by 7 articles. 订阅此论文施引文献 订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献

1. Empirical Study of Move Smart Contract Security: Introducing MoveScan for Enhanced Analysis;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11

2. QuadraCode AI: Smart Contract Vulnerability Detection with Multimodal Representation;2024 33rd International Conference on Computer Communications and Networks (ICCCN);2024-07-29

3. Smart Contract Vulnerability Detection Using Deep Learning Algorithms on EVM bytecode;2024 13th Mediterranean Conference on Embedded Computing (MECO);2024-06-11

4. “Vulnerabilities in Smart Contracts: A Detailed Survey of Detection and Mitigation Methodologies”;2024 International Conference on Emerging Technologies in Computer Science for Interdisciplinary Applications (ICETCS);2024-04-22

5. ChainSniper: A Machine Learning Approach for Auditing Cross-Chain Smart Contracts;Proceedings of the 2024 9th International Conference on Intelligent Information Technology;2024-02-23

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3