返回
Smart contract vulnerabilities detection with bidirectional encoder representations from transformers and control flow graph
DOI:10.1007/s00530-024-01406-9.png)
摘要
En 中文
Up to now, the smart contract vulnerabilities detection methods based on sequence modal data and sequence models have been the most commonly used. However, existing state-of-the-art methods disregard the issue of sequence modal data loses structural information and control flow information. Additionally, it is hard for sequence models to extract global features of smart contracts. Moreover, these methods rarely consider the impact of noise data on vulnerabilities detection. To tackle these issues, we propose a smart contract vulnerabilities detection model based on bidirectional encoder representation from transformers (BERT) and control flow graph (CFG). On the one hand, we design a denoising method suitable for control flow graphs to reduce the impact of noisy data on vulnerabilities detection. On the other hand, we design a novel method to parse the control flow graph into a BERT input form that retains control flow information and structural information. The BERT learns the potential vulnerability characteristics of smart contracts to fine-tune itself. Through an empirical evaluation of a large-scale real-world dataset and compare 5 state-of-the-art baseline methods. Our method achieves (1) optimal performance over all baseline methods; (2) 0.6-17.1% higher F1-score than baseline methods; (3) 0.7-16.7% higher accuracy than baseline methods; (4) 0.6-17% higher precision than baseline methods; (5) 0.2-19.5% higher recall than baseline methods.
Keyword:
Smart contract
Vulnerabilities detection
Control flow graph
BERT
期刊
IF:
3.1
论文数:
2.8K
被引数:
2.7K
机构
引用论文
The Effects of Three-Dimensional Ligand Immobilization on Kinetic Measurements in Biosensors
Polymers
IF0
GasFuzzer: Fuzzing Ethereum Smart Contract Binaries to Expose Gas-Oriented Exception Security VulnerabilitiesGasFuzzer: 模糊以太坊智能合约二进制文件以暴露面向Gas的异常安全漏洞
IEEE ACCESS
IF3.6
Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
IEEE ACCESS
IF3.6
Permissioned Blockchain and Deep Learning for Secure and Efficient Data Sharing in Industrial Healthcare Systems许可区块链和深度学习在工业医疗系统中实现安全高效的数据共享

