Litcius/Paper detail

Smart Contract Vulnerability Detection Based on Automated Feature Extraction and Feature Interaction

Lina Li, Yang Liu, Guodong Sun, Nianfeng Li

2023IEEE Transactions on Knowledge and Data Engineering20 citationsDOI

Abstract

Smart contract is the core of blockchain operation, and contract vulnerability will cause huge economic losses. Therefore, effective smart contract vulnerability detection is of vital importance and attracts more and more attention. In this paper, we propose a vulnerability detection model (VDM-AEI) based on automatic feature extraction and feature interaction. For the first time, this model converts smart contracts into gray images and uses VGG16 and GRU models to automatically extract vulnerability features and filter effective features, respectively. Then, a contract graph and an expert knowledge feature vector are constructed by using commonly used methods as part of feature construction. Next, AutoInt and DCN networks are used to build a dual feature interaction network to obtain more abundant vulnerability feature information, which extracts high-dimensional nonlinear features from the low and sparse features of the contract graph feature vector and the expert knowledge-defined feature vector. Finally, all ouput features of GRU, AutoInt and DCN networks are integrated to obtain vulnerability classification results through fully connected neural networks. We conducted extensive experiments on the ESC and VSC datasets for reentrancy vulnerabilities, timestamp dependency vulnerabilities, and infinite loop vulnerabilities. The experimental results prove the effectiveness and accuracy of the VDM-AEI model. Compared with the latest vulnerability detection model CGE, the accuracy rates of the 3 types of vulnerability detection are improved by 10.85%, 6.18%, and 12.34%, respectively. In addition, the predicted F1 scores of VDM-AEI are all greater than 95%, and the recall rate is no less than 94%.

Topics & Concepts

Computer scienceFeature extractionVulnerability (computing)Feature (linguistics)Artificial intelligenceFeature vectorData miningVulnerability assessmentSupport vector machineMachine learningPattern recognition (psychology)Computer securityPhilosophyPsychotherapistPsychological resiliencePsychologyLinguisticsBlockchain Technology Applications and SecurityCybercrime and Law Enforcement StudiesFinTech, Crowdfunding, Digital Finance
Smart Contract Vulnerability Detection Based on Automated Feature Extraction and Feature Interaction | Litcius