Cargando…

SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection

With countless devices connected to the Internet of Things, trust mechanisms are especially important. IoT devices are more deeply embedded in the privacy of people’s lives, and their security issues cannot be ignored. Smart contracts backed by blockchain technology have the potential to solve these...

Descripción completa

Detalles Bibliográficos
Autores principales: Zhang, Lejun, Li, Yuan, Jin, Tianxing, Wang, Weizheng, Jin, Zilong, Zhao, Chunhui, Cai, Zhennao, Chen, Huiling
Formato: Online Artículo Texto
Lenguaje:English
Publicado: MDPI 2022
Materias:
Acceso en línea:https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9231163/
https://www.ncbi.nlm.nih.gov/pubmed/35746403
http://dx.doi.org/10.3390/s22124621
_version_ 1784735263965052928
author Zhang, Lejun
Li, Yuan
Jin, Tianxing
Wang, Weizheng
Jin, Zilong
Zhao, Chunhui
Cai, Zhennao
Chen, Huiling
author_facet Zhang, Lejun
Li, Yuan
Jin, Tianxing
Wang, Weizheng
Jin, Zilong
Zhao, Chunhui
Cai, Zhennao
Chen, Huiling
author_sort Zhang, Lejun
collection PubMed
description With countless devices connected to the Internet of Things, trust mechanisms are especially important. IoT devices are more deeply embedded in the privacy of people’s lives, and their security issues cannot be ignored. Smart contracts backed by blockchain technology have the potential to solve these problems. Therefore, the security of smart contracts cannot be ignored. We propose a flexible and systematic hybrid model, which we call the Serial-Parallel Convolutional Bidirectional Gated Recurrent Network Model incorporating Ensemble Classifiers (SPCBIG-EC). The model showed excellent performance benefits in smart contract vulnerability detection. In addition, we propose a serial-parallel convolution (SPCNN) suitable for our hybrid model. It can extract features from the input sequence for multivariate combinations while retaining temporal structure and location information. The Ensemble Classifier is used in the classification phase of the model to enhance its robustness. In addition, we focused on six typical smart contract vulnerabilities and constructed two datasets, CESC and UCESC, for multi-task vulnerability detection in our experiments. Numerous experiments showed that SPCBIG-EC is better than most existing methods. It is worth mentioning that SPCBIG-EC can achieve F1-scores of 96.74%, 91.62%, and 95.00% for reentrancy, timestamp dependency, and infinite loop vulnerability detection.
format Online
Article
Text
id pubmed-9231163
institution National Center for Biotechnology Information
language English
publishDate 2022
publisher MDPI
record_format MEDLINE/PubMed
spelling pubmed-92311632022-06-25 SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection Zhang, Lejun Li, Yuan Jin, Tianxing Wang, Weizheng Jin, Zilong Zhao, Chunhui Cai, Zhennao Chen, Huiling Sensors (Basel) Article With countless devices connected to the Internet of Things, trust mechanisms are especially important. IoT devices are more deeply embedded in the privacy of people’s lives, and their security issues cannot be ignored. Smart contracts backed by blockchain technology have the potential to solve these problems. Therefore, the security of smart contracts cannot be ignored. We propose a flexible and systematic hybrid model, which we call the Serial-Parallel Convolutional Bidirectional Gated Recurrent Network Model incorporating Ensemble Classifiers (SPCBIG-EC). The model showed excellent performance benefits in smart contract vulnerability detection. In addition, we propose a serial-parallel convolution (SPCNN) suitable for our hybrid model. It can extract features from the input sequence for multivariate combinations while retaining temporal structure and location information. The Ensemble Classifier is used in the classification phase of the model to enhance its robustness. In addition, we focused on six typical smart contract vulnerabilities and constructed two datasets, CESC and UCESC, for multi-task vulnerability detection in our experiments. Numerous experiments showed that SPCBIG-EC is better than most existing methods. It is worth mentioning that SPCBIG-EC can achieve F1-scores of 96.74%, 91.62%, and 95.00% for reentrancy, timestamp dependency, and infinite loop vulnerability detection. MDPI 2022-06-19 /pmc/articles/PMC9231163/ /pubmed/35746403 http://dx.doi.org/10.3390/s22124621 Text en © 2022 by the authors. https://creativecommons.org/licenses/by/4.0/Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (https://creativecommons.org/licenses/by/4.0/).
spellingShingle Article
Zhang, Lejun
Li, Yuan
Jin, Tianxing
Wang, Weizheng
Jin, Zilong
Zhao, Chunhui
Cai, Zhennao
Chen, Huiling
SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection
title SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection
title_full SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection
title_fullStr SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection
title_full_unstemmed SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection
title_short SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection
title_sort spcbig-ec: a robust serial hybrid model for smart contract vulnerability detection
topic Article
url https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9231163/
https://www.ncbi.nlm.nih.gov/pubmed/35746403
http://dx.doi.org/10.3390/s22124621
work_keys_str_mv AT zhanglejun spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT liyuan spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT jintianxing spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT wangweizheng spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT jinzilong spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT zhaochunhui spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT caizhennao spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection
AT chenhuiling spcbigecarobustserialhybridmodelforsmartcontractvulnerabilitydetection