Blockchain Transaction Feature Extraction for Threat Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The lack of transparency in blockchain and smart contract ecosystems makes it difficult to monitor and secure smart contracts, as opcode and transaction logs are not easily legible by humans, leading to potential malicious or vulnerable contracts.
Innovation Solution
Extract features from program protocols recorded on a blockchain for use in a machine learning model to identify security threats, using an access control server to manage access and security through cryptographic keys, machine learning models, and sandbox environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If blockchain transactions use opcode and trace log formats, then transaction execution and validation are efficient, but human readability and transparency are poor
Solution Approach 1:
The patent introduces a feature extraction system as an intermediary between the blockchain transaction and human analysis. This system extracts meaningful features from opcode and trace log data, creating a bridge that maintains the efficiency of machine-executed transactions while providing human-readable summaries and explanations of transaction behavior.
Solution Approach 2:
The patent replaces direct human interpretation of mechanical blockchain data (opcode/trace log) with an automated feature extraction and presentation system. This substitution maintains the mechanical efficiency of transaction processing while providing human-understandable representations through extracted features and visualizations.
2Ease of manufacture
If smart contracts are deployed without feature extraction, then deployment is simple and fast, but security monitoring and threat detection are difficult
Solution Approach 1:
The patent performs feature extraction as a preliminary action during contract deployment. By extracting and storing security-relevant features at deployment time, the system prepares security monitoring capabilities in advance, enabling thorough security analysis without complicating the actual deployment process.
Solution Approach 2:
The patent creates a copy of the smart contract's operational characteristics through feature extraction. This copy contains security-relevant information in a human-readable format, enabling security monitoring and analysis without affecting the original contract's execution or deployment simplicity.
3Loss of information
If detailed transaction monitoring is implemented, then security and transparency improve, but system complexity and computational overhead increase
Solution Approach 1:
The patent extracts only the essential security-relevant features from complex transaction data. By taking out and isolating specific meaningful features rather than processing all raw data, the system achieves detailed monitoring with reduced computational complexity and lower system overhead.
Solution Approach 2:
The patent segments the transaction monitoring task into discrete feature extraction units. Each feature represents a specific aspect of transaction behavior, allowing the system to process and analyze only the necessary information separately, reducing overall system complexity while maintaining comprehensive monitoring.
Data Source
AI summary
An access control server may receive state information of an autonomous program protocol that is recorded on a blockchain. The access control server may generate a trace log associated with one or more transactions executed by the autonomous program protocol, the trace log comprising machine events executed by the blockchain, the machine actions associated with the one or more transactions. The access control server may extract a set of features from the trace log, wherein a feature in the set comprises a summary of a machine event executed by the blockchain. The access control server may input the set of features to a machine learning model to determine a threat nature associated with the transactions of the autonomous program protocol. The access control server may perform a responsive action to address the threat nature.