Vulnerability Analysis of Smart Contract for Blockchain-Based IoT Applications: A Machine Learning Approach

【Author】 Zhou, Qihao; Zheng, Kan; Zhang, Kuan; Hou, Lu; Wang, Xianbin

【Source】IEEE INTERNET OF THINGS JOURNAL

【影响因子】10.238

【Abstract】With the emergence of Blockchain-based Internet of Things (BIoT) applications, smart contracts have become one of the most appealing aspects because they reduce the cost and complexity of distributed administration. However, the immaturity of smart contracts may result in significant financial losses or the leakage of sensitive information. This article first investigates the taxonomy of security issues associated with smart contracts considering BIoT scenarios. To address these security concerns and overcome the limitations of existing methods, a tree-based machine learning vulnerability detection (TMLVD) method is proposed to perform the vulnerability analysis of smart contracts. TMLVD feeds the intermediate representations of smart contracts derived from abstract syntax trees (AST) into a tree-based training network for building the prediction model. Multidimensional features are captured by this model to identify smart contracts as vulnerable. The detection phase can be implemented quickly with limited computing resources and the accuracy of the detection results is guaranteed. The experimental evaluation demonstrated the effectiveness and efficiency of TMLVD on a data set comprised of Ethereum smart contracts.

【Keywords】Blockchain; Internet of Things (IoT); machine learning (ML); smart contract; vulnerability analysis

【发表时间】2022 DEC 15

【收录时间】2023-01-16

【文献类型】理论模型

【主题类别】

区块链治理-技术治理-智能合约漏洞检测