arrow
Return

A vulnerability detection framework with enhanced graph feature learning

delete2024-10-01
delete0
PRE
AI
J
Jianxin Cheng
Y
Yizhou Chen
Y
Yongzhi Cao
王
王捍贫 (Hanpin Wang) *
DOI:10.1016/j.jss.2024.112118delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Vulnerability detection in smart contracts is critical to secure blockchain systems. Existing methods represent the bytecode as a graph structure and leverage graph neural networks to learn graph features for vulnerability detection. However, these methods are limited to handling the long-range dependencies between nodes. This means that they might focus on learning local node feature while ignoring global node information. In this paper, we propose a novel vulnerability detection framework with E nhanced G raph F eature L earning (EGFL), which aims to extract the global node information and utilize it to improve vulnerability detection in smart contracts. Specifically, we first represent the bytecode as a Control Flow Graph (CFG). To extract global node information, EGFL constructs a linear node feature matrix from CFG, and uses the feature -aware and relationship -aware modules to handle long-range dependencies between nodes. Meanwhile, a graph neural network is adopted to extract the local node feature from CFG. Subsequently, we fuse the global node information and local node feature to generate an enhanced graph feature for capturing more vulnerability features. We evaluate EGFL on the benchmark dataset with six types of smart contract vulnerabilities. Results show that EGFL outperforms fourteen state-of-the-art vulnerability detection methods by 10.83%-60.28% in F1 score.
Keywords:
Vulnerability detection
Software security
Code representation
Control flow graph
Graph neural network

Journal

Journal of Systems and Software cover
Journal of Systems and Software
IF:
4.1
Papers:
5.5K
Citations:
8.4K

Organization

P
peking university
Scholars:
11.9W
Papers: 8.7W
Citations: 146
Cited Papers

Cited Papers

Orientational Dynamics of theSc3Trimer inC82: An EPR Study
err1994-12-19
err0
errOAAI
errP. H. M. van Loosdrecht; R. D. Johnson; M. S. de Vries; C. -H. Kiang; D. S. Bethune; H. C. Dorn; P. Burbank; S. Stevenson
errShare
errSave
Ultrafast Absorption Changes of the Lhcii Carotenoids upon Selective Excitation of the Chlorophylls
err1998-01-01
err0
PREAI
errC. C. Gradinaru; I. H. M. van Stokkum; R. van Grondelle; H. van Amerongen
errShare
errSave
Characterization of Hot-Dip Aluminized C45 Carbon Steel before and after Cyclic Heating in Air
err2021-09-01
err0
PREAI
errHawkar J. Muhammed; Márton Benke; Dániel Koncz-Horváth; Zsolt Sályi; Tamás I. Török
errShare
errSave
On the Significance of Category Prediction for Code-Comment Synchronization
err2023-03-29
err22
PREAI
errYang, Zhen; Keung, Jacky Wai; Yu, Xiao; Xiao, Yan; Jin, Zhi; Zhang, Jingyu
errShare
errSave
Environmental Performance Index to Assess the Situation in Regions of Ukraine in Terms of their Competitiveness
err2021-03-01
err0
errOAAI
errWladyslawa Luczka; Nadiia Shmygol; Irina Varlamova; Joanna Smoluk-Sikorska; Mariusz Malinowski
errShare
errSave
Vulnerability Detection by Learning From Syntax-Based Execution Paths of Code
err2023-08-01
err15
PREAI
errZhang, Junwei; Liu, Zhongxin; Hu, Xing; Xia, Xin; Li, Shanping
errShare
errSave
Ontological Engineering: Principles, Methods, Tools and Languages
err2024-09-04
err0
PREAI
errOscar Corcho; Mariano Fernández-López; Asunción Gómez-Pérez
errShare
errSave
researcher View more