A smart contract security vulnerability mining method and system based on artificial intelligence

Abstract

The invention discloses an intelligent contract security vulnerability mining method and system based on artificial intelligence. The invention provides an intelligent contract security vulnerabilitymining method based on artificial intelligence. The method comprises the following steps of disassembling a binary system of the intelligent contract according to an instruction set of an intelligentcontract, converting the system into smart contract assembly, dividing the byte code into different modules according to an intelligent contract byte code jump instruction; and then according to thesource code block and the target code block of the jump instruction, generating a control flow graph of the intelligent contract byte code for deep learning, thereby greatly reducing the manual intervention cost, and furthest avoiding negligence on security vulnerability detection caused by manual intervention errors in other defenses. The technology disclosed by the invention can be applied to anindustrial platform in a large range; the technology disclosed by the invention has an intelligent learning function, and when a novel vulnerability sample is found, the characteristics of the vulnerability sample can be quickly learned, so that the large-range diffusion of vulnerabilities is avoided.

Description

technical field [0001] The disclosure relates to the fields of artificial intelligence and smart contracts, and specifically relates to a method for mining security vulnerabilities of smart contracts based on artificial intelligence, which is applicable to the discovery and early warning of vulnerabilities in Ethereum smart contracts. Background technique [0002] As a decentralized consensus system, blockchain has been widely used in many fields that traditionally rely on centralized trust institutions. As the pioneer of blockchain 2.0, Ethereum currently has the world's largest blockchain open source platform and community, which can provide developers with the ability to write their own blockchain rules and distributed ledgers. Ethereum named this technology smart contracts. A smart contract is a piece of code that runs on the blockchain. This code specifies the transaction rules on the blockchain, so nodes on this chain must unconditionally follow this rule to conduct t...

AI Technical Summary

Problems solved by technology

These logical rules are numerous and complex, and manual definitions are prone to omissions. If omissions occur, even if the static analysis method is completely correct, security vulnerabilities will be overlooked;

[0006] (2) For the method of mining vulnerabilities based on code static analysis, a large amount of manual intervention is required, so that it cannot be used in large-scale automation;

[0007] (3) The current formal proof method cannot prove the security of a smart contract in the true sense, because according to the requirements of formal proof, a system must be proved to be safe by all its associated codes, so if To use formal proof, it is necessary to verify every line of code of the entire Ethereum system from the bottom layer to the upper layer, and every change needs to be completely re-verified, which is currently unrealistic;

[0008] (4) All current methods lack the characteristics of intelligence, that is, they can only detect fixed rules, do not have the function of evolution and learning, and do not know how to relearn when encountering new security vulnerabilities

Images