messi-q / gpscvuldetector

Combining Graph Neural Networks with Expert Knowledge for Smart Contract Vulnerability Detection (TKDE Accepted)

GPSCVulDetector

This repo is a python implementation of combining graph neural network with expert knowledge for smart contract vulnerability detection.

Citation

Please use this citation in your paper if you refer to our paper or code.

@article{liu2023combining,
  title={Combining Graph Neural Networks With Expert Knowledge for Smart Contract Vulnerability Detection},
  author={Liu, Zhenguang and Qian, Peng and Wang, Xiaoyang and Zhuang, Yuan and Qiu, Lin and Wang, Xun},
  journal={IEEE Transactions on Knowledge \& Data Engineering},
  volume={35},
  number={02},
  pages={1296--1310},
  year={2023},
  publisher={IEEE Computer Society}
}

Requirements

Required Packages

• python 3+
• TensorFlow 2.0
• numpy 1.18.2
• sklearn 0.20.2

Run the following script to install the required packages.

pip install --upgrade pip
pip install tensorflow==2.0
pip install numpy==1.18.2
pip install scikit-learn==0.20.2

Graph extractor & Pattern extractor

1. Graph: The contract graph and its feature are extracted by the automatic graph extractor in the graph_extractor_example directory (or refer to our previous methods).
2. Pattern: The expert pattern and its feature are extracted by the automatic pattern extractor in the pattern_extractor_example directory.

Notably, you can also use the features extracted in AMEVulDetector.

If any question, please email to [email protected].

Running Project

• To run program, please use this command: python3 GPSCVulDetector.py.
• Also, you can set specific hyperparameters, and all the hyperparameters can be found in parser.py.

Examples:

python3 GPSCVulDetector.py
python3 GPSCVulDetector.py --model CGE --lr 0.002 --dropout 0.2 --epochs 100 --batch_size 32

References

1. Smart Contract Vulnerability Detection Using Graph Neural Networks. IJCAI 2020. GNNSCVulDetector.

@inproceedings{ijcai2020-454,
  title     = {Smart Contract Vulnerability Detection using Graph Neural Network},
  author    = {Zhuang, Yuan and Liu, Zhenguang and Qian, Peng and Liu, Qi and Wang, Xiang and He, Qinming},
  booktitle = {Proceedings of the Twenty-Ninth International Joint Conference on
               Artificial Intelligence, {IJCAI-20}},
  publisher = {International Joint Conferences on Artificial Intelligence Organization}, 
  pages     = {3283--3290},
  year      = {2020},
}

2. Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models. IEEE Access. ReChecker.

@article{qian2020towards,
  title={Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models},
  author={Qian, Peng and Liu, Zhenguang and He, Qinming and Zimmermann, Roger and Wang, Xun},
  journal={IEEE Access},
  year={2020},
  publisher={IEEE}
}

gpscvuldetector's Issues

请问GraphExtractor.py中不包含数据流的部分吗

Where is the dataset provided？

GPSCVulDetector.py file not found

In the README.md file its mentioned
To run program, please use this command: python3 GPSCVulDetector.py.

But there is no GPSCVulDetector.py file.
Is the CGEVulDetector.py file which is incorrectly renamed ?

You submitted master and tkde-1 branches. What is the difference between them?

请问TMP网络在哪个位置

没找到原文献中提出的tmp网络代码

generate_potential_fallback_node/elimination_node/elimination_edge