Intelligent contract vulnerability detection method and system based on grey box fuzzy test

Abstract

The invention belongs to the technical field of intelligent contract vulnerability detection, and particularly relates to an intelligent contract vulnerability detection method and system based on grey box fuzzy testing, and the method comprises the steps: firstly analyzing a control flow diagram to obtain key information such as a function state variable; secondly, initializing a transaction sequence to generate a meaningful initial transaction sequence; then, branch analysis and energy distribution are carried out under the look-ahead analysis, and branches which are prone to attack are considered preferentially; and finally, generating a test case by combining random mutation and variation based on conditional branches based on the fuzzy test of the data stream, and generating a meaningful test case as a target test case by utilizing a data stream feedback mechanism. By comprehensively utilizing branch analysis and energy distribution based on look-ahead analysis and feedback based on data flow, the efficiency and accuracy of intelligent contract vulnerability detection are remarkably improved, complex contract logic can be better processed, deep vulnerabilities can be found, and meanwhile the branch coverage rate is improved.

Images