Doublade: unknown vulnerability detection in smart contracts via abstract signature matching and refined detection rules

Yinxing Xue, Jiaming Ye, Mingliang Ma, Lei Ma, Yi Li, Haijun Wang, Yun Lin, Tianyong Peng, Yang Liu
2019-12-01
Abstract:With the prosperity of smart contracts and the blockchain technology, various security analyzers have been proposed from both the academia and industry to address the associated risks. Yet, there does not exist a high-quality benchmark of smart contract vulnerability for security research. In this study, we propose an approach towards building a high-quality vulnerability benchmark. Our approach consists of two parts. First, to improve recall, we propose to search for similar vulnerabilities in an automated way by leveraging the abstract vulnerability signature (AVS). Second, to remove the false positives (FPs) due to AVS-based matching, we summarize the detection rules of existing tools and apply the refined rules by considering various defense mechanisms (DMs). By integrating AVS-based code matching and the refined detection rules (RDR), our approach achieves higher precision and recall. On the collected 76 …
What problem does this paper attempt to address?