返回
Bi-thresholds-based unknown vulnerability detection in smart contracts multi-classification model
DOI:10.1016/j.compeleceng.2024.109682.png)
摘要
En 中文
Ethereum's development has established a trusted environment for executing smart contracts. However, smart contracts often involve significant financial transfers and become immutable once deployed on the blockchain. If a security vulnerability occurs, developers will not be able to respond quickly, resulting in significant financial losses. Current solutions for detecting smart contracts focus mainly on known vulnerabilities, ignoring unknown ones. To address this issue, we propose a bi-thresholds-based scheme to identify unknown vulnerabilities. First, we collect the opcode sequences of transactions involving smart contracts by replaying the Ethereum transactions. Second, we use N-gram and TF-IDF techniques to extract features from the opcode sequences as inputs to a multi-classification model. Again, we set a double threshold to eliminate known vulnerabilities and normal sequences and to identify unknown vulnerability sequences, based on the principle that unknown and known vulnerabilities behave similarly. Finally, The experimental results show that our scheme has an accuracy of 90.9% and an F1-score of 91.5% in detecting unknown vulnerabilities in smart contracts.
Keyword:
Smart contracts
Opcode sequences
Unknown vulnerabilities
Multi-classification model
Bi-thresholds
期刊
C
IF:
4.9
论文数:
6.7K
被引数:
1.3W
机构
引用论文
A systematic review shows no performance benefit of machine learning over logistic regression for clinical prediction models一项系统评价显示,机器学习在临床预测模型中没有比逻辑回归更多的性能优势
Crystal structure of extracellular human BAFF, a TNF family member that stimulates B lymphocytes细胞外人BAFF的晶体结构,刺激B淋巴细胞的TNF家族成员

