Title | Smart Contract Vulnerability Detection Using Code Representation Fusion |
Publication Type | Conference Paper |
Year of Publication | 2021 |
Authors | Wang, Ben, Chu, Hanting, Zhang, Pengcheng, Dong, Hai |
Conference Name | 2021 28th Asia-Pacific Software Engineering Conference (APSEC) |
Date Published | dec |
Keywords | AST, code representation fusion, codes, compositionality, Deep Learning, Fuses, Human Behavior, Manuals, Metrics, Program slicing, pubcrawl, Resiliency, Semantics, smart contracts, Syntactics, vulnerability detection |
Abstract | At present, most smart contract vulnerability detection use manually-defined patterns, which is time-consuming and far from satisfactory. To address this issue, researchers attempt to deploy deep learning techniques for automatic vulnerability detection in smart contracts. Nevertheless, current work mostly relies on a single code representation such as AST (Abstract Syntax Tree) or code tokens to learn vulnerability characteristics, which might lead to incompleteness of learned semantics information. In addition, the number of available vulnerability datasets is also insufficient. To address these limitations, first, we construct a dataset covering most typical types of smart contract vulnerabilities, which can accurately indicate the specific row number where a vulnerability may exist. Second, for each single code representation, we propose a novel way called AFS (AST Fuse program Slicing) to fuse code characteristic information. AFS can fuse the structured information of AST with program slicing information and detect vulnerabilities by learning new vulnerability characteristic information. |
DOI | 10.1109/APSEC53868.2021.00069 |
Citation Key | wang_smart_2021 |