.png){kind=icon}
返回
A vulnerability detection framework with enhanced graph feature learning
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jss.2024.112118.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Vulnerability detection in smart contracts is critical to secure blockchain systems. Existing methods represent the bytecode as a graph structure and leverage graph neural networks to learn graph features for vulnerability detection. However, these methods are limited to handling the long-range dependencies between nodes. This means that they might focus on learning local node feature while ignoring global node information. In this paper, we propose a novel vulnerability detection framework with E nhanced G raph F eature L earning (EGFL), which aims to extract the global node information and utilize it to improve vulnerability detection in smart contracts. Specifically, we first represent the bytecode as a Control Flow Graph (CFG). To extract global node information, EGFL constructs a linear node feature matrix from CFG, and uses the feature -aware and relationship -aware modules to handle long-range dependencies between nodes. Meanwhile, a graph neural network is adopted to extract the local node feature from CFG. Subsequently, we fuse the global node information and local node feature to generate an enhanced graph feature for capturing more vulnerability features. We evaluate EGFL on the benchmark dataset with six types of smart contract vulnerabilities. Results show that EGFL outperforms fourteen state-of-the-art vulnerability detection methods by 10.83%-60.28% in F1 score.
Keyword:
Vulnerability detection
Software security
Code representation
Control flow graph
Graph neural network
期刊
IF:
4.1
论文数:
5.5K
被引数:
8.4K
机构
引用论文
.png){kind=icon}
Ultrafast Absorption Changes of the Lhcii Carotenoids upon Selective Excitation of the Chlorophylls
PREAI
分享收藏分享收藏SedSVD: Statement-level software vulnerability detection based on Relational Graph Convolutional Network with subgraph embeddingSedSVD: 基于带子图嵌入的关系图卷积网络的语句级软件漏洞检测
PREAI
分享收藏
Vulnerability Detection by Learning From Syntax-Based Execution Paths of Code通过基于语法的代码执行路径学习进行漏洞检测
PREAI
分享收藏
查看更多内容