Visible to the public Smart Contract Vulnerability Detection Using Code Representation Fusion

TitleSmart Contract Vulnerability Detection Using Code Representation Fusion
Publication TypeConference Paper
Year of Publication2021
AuthorsWang, Ben, Chu, Hanting, Zhang, Pengcheng, Dong, Hai
Conference Name2021 28th Asia-Pacific Software Engineering Conference (APSEC)
Date Publisheddec
KeywordsAST, code representation fusion, codes, compositionality, Deep Learning, Fuses, Human Behavior, Manuals, Metrics, Program slicing, pubcrawl, Resiliency, Semantics, smart contracts, Syntactics, vulnerability detection
AbstractAt present, most smart contract vulnerability detection use manually-defined patterns, which is time-consuming and far from satisfactory. To address this issue, researchers attempt to deploy deep learning techniques for automatic vulnerability detection in smart contracts. Nevertheless, current work mostly relies on a single code representation such as AST (Abstract Syntax Tree) or code tokens to learn vulnerability characteristics, which might lead to incompleteness of learned semantics information. In addition, the number of available vulnerability datasets is also insufficient. To address these limitations, first, we construct a dataset covering most typical types of smart contract vulnerabilities, which can accurately indicate the specific row number where a vulnerability may exist. Second, for each single code representation, we propose a novel way called AFS (AST Fuse program Slicing) to fuse code characteristic information. AFS can fuse the structured information of AST with program slicing information and detect vulnerabilities by learning new vulnerability characteristic information.
DOI10.1109/APSEC53868.2021.00069
Citation Keywang_smart_2021