基于差分进化算法与求解时间预测的智能合约漏洞检测OA
Smart Contract Vulnerabilities Based on Differential Evolutionary Algorithms and Solution Time Prediction Detection
针对目前智能合约的混合模糊测试框架存在探索效率低下、测试用例生成不具有引导性、约束求解韧性差等问题,提出了一种改进版混合模糊检测框架DEST(differential evolution with solution time).该模型融合模糊测试与符号执行方法的优点对智能合约进行高效率的探测,融入差分进化(differential evolution,DE)算法优化测试用例的质量和全局搜索能力,通过长短期记忆神经网络模型(long short-term memory,LSTM)框架学习可满足性模理论(satisfiability modulo theories,SMT)脚本特征预测求解时间,提升符号执行的求解效率.实验表明,DEST模型比最先进的基准模型漏洞检测率提高9.42％,平均代码覆盖率提高3.6％.
Aiming at the problems of inefficient exploration,non-guided test case generation,and poor constraint-solving tenacity in current hybrid fuzzy testing frameworks for smart contracts,this paper proposes an improved hybrid fuzzy detection framework DEST.The model integrates the advantages of fuzzy testing and symbolic execution methods to efficiently detect smart contracts,incorporates the differential evolution(DE)algorithm to optimize the quality of test cases and global search capability,and learns SMT script features through LSTM framework to predict the solving time.The DEST model uses the differential evolutionary(DE)algorithm to optimize the quality of test cases and global search capability,and learns SMT script features through LSTM framework to predict the solving time,thereby improving the solving efficiency of symbolic execution.Experiments show that the DEST model improves vulnerability detection by 9.42％and average code coverage by 3.6％over the state-of-the-art benchmark model.
Cai Lizhi;Ma Yuan;Yang Kang
East China University of Science and Technology,Shanghai 200237||Shanghai Key Laboratory of Computer Software Testing Evaluating,Shanghai 201112||Shanghai Development Center of Computer Software Technology,Shanghai 201112East China University of Science and Technology,Shanghai 200237Shanghai Key Laboratory of Computer Software Testing Evaluating,Shanghai 201112||Shanghai Development Center of Computer Software Technology,Shanghai 201112
信息技术与安全科学
深度学习漏洞检测模糊测试符号执行差分进化算法
deep learningvulnerability detectionfuzzing testsymbolic executiondifferential evolution algorithm
《信息安全研究》 2026 (1)
24-32,9
上海市青年科技英才扬帆专项(24YF2720000)
评论