Smart Contract Vulnerability Detection Based on Automated Feature Extraction and Feature Interaction

【Author】 Li, Lina; Liu, Yang; Sun, Guodong; Li, Nianfeng

【Source】IEEE TRANSACTIONS ON KNOWLEDGE AND DATA ENGINEERING

【影响因子】9.235

【Abstract】Smart contract is the core of blockchain operation, and contract vulnerability will cause huge economic losses. Therefore, effective smart contract vulnerability detection is of vital importance and attracts more and more attention. In this paper, we propose a vulnerability detection model (VDM-AEI) based on automatic feature extraction and feature interaction. For the first time, this model converts smart contracts into gray images and uses VGG16 and GRU models to automatically extract vulnerability features and filter effective features, respectively. Then, a contract graph and an expert knowledge feature vector are constructed by using commonly used methods as part of feature construction. Next, AutoInt and DCN networks are used to build a dual feature interaction network to obtain more abundant vulnerability feature information, which extracts high-dimensional nonlinear features from the low and sparse features of the contract graph feature vector and the expert knowledge-defined feature vector. Finally, all output features of GRU, AutoInt and DCN networks are integrated to obtain vulnerability classification results through fully connected neural networks. We conducted extensive experiments on the ESC and VSC datasets for reentrancy vulnerabilities, timestamp dependency vulnerabilities, and infinite loop vulnerabilities. The experimental results prove the effectiveness and accuracy of the VDM-AEI model. Compared with the latest vulnerability detection model CGE, the accuracy rates of the 3 types of vulnerability detection are improved by 10.85%, 6.18%, and 12.34%, respectively. In addition, the predicted F1 scores of VDM-AEI are all greater than 95%, and the recall rate is no less than 94%.

【Keywords】Feature extraction; Smart contracts; Deep learning; Codes; Blockchains; Flow graphs; Data mining; Smart contract; vulnerability detection; feature engineering; deep learning; feature interaction

【发表时间】2024 SEP

【收录时间】2024-08-19

【文献类型】实验仿真

【主题类别】

区块链技术-核心技术-智能合约