PrAIoritize: Automated Early Prediction and Prioritization of Vulnerabilities in Smart Contracts Article Swipe

MAKE IMPACT

Majd Soud , Grischa Liebel , Mohammad Hamdaqa · YOU? · · 2023 · Open Access · · DOI: https://doi.org/10.48550/arxiv.2308.11082

Context:Smart contracts are prone to numerous security threats due to undisclosed vulnerabilities and code weaknesses. In Ethereum smart contracts, the challenges of timely addressing these code weaknesses highlight the critical need for automated early prediction and prioritization during the code review process. Efficient prioritization is crucial for smart contract security. Objective:Toward this end, our research aims to provide an automated approach, PrAIoritize, for prioritizing and predicting critical code weaknesses in Ethereum smart contracts during the code review process. Method: To do so, we collected smart contract code reviews sourced from Open Source Software (OSS) on GitHub and the Common Vulnerabilities and Exposures (CVE) database. Subsequently, we developed PrAIoritize, an innovative automated prioritization approach. PrAIoritize integrates advanced Large Language Models (LLMs) with sophisticated natural language processing (NLP) techniques. PrAIoritize automates code review labeling by employing a domain-specific lexicon of smart contract weaknesses and their impacts. Following this, feature engineering is conducted for code reviews, and a pre-trained DistilBERT model is utilized for priority classification. Finally, the model is trained and evaluated using code reviews of smart contracts. Results: Our evaluation demonstrates significant improvement over state-of-the-art baselines and commonly used pre-trained models (e.g. T5) for similar classification tasks, with 4.82\%-27.94\% increase in F-measure, precision, and recall. Conclusion: By leveraging PrAIoritize, practitioners can efficiently prioritize smart contract code weaknesses, addressing critical code weaknesses promptly and reducing the time and effort required for manual triage.

Type

preprint

Language

en

Landing Page

http://arxiv.org/abs/2308.11082

PDF

https://arxiv.org/pdf/2308.11082

OA Status

green

Related Works

10

OpenAlex ID

https://openalex.org/W4386113912

Raw OpenAlex JSON

OpenAlex ID

https://openalex.org/W4386113912

Canonical identifier for this work in OpenAlex

DOI

https://doi.org/10.48550/arxiv.2308.11082

Digital Object Identifier

Title

PrAIoritize: Automated Early Prediction and Prioritization of Vulnerabilities in Smart Contracts

Work title

Type

preprint

OpenAlex work type

Language

en

Primary language

Publication year

2023

Year of publication

Publication date

2023-08-21

Full publication date if available

Authors

Majd Soud, Grischa Liebel, Mohammad Hamdaqa

List of authors in order

Landing page

https://arxiv.org/abs/2308.11082

Publisher landing page

PDF URL

https://arxiv.org/pdf/2308.11082

Direct link to full text PDF

Open access

Yes

Whether a free full text is available

OA status

green

Open access status per OpenAlex

OA URL

https://arxiv.org/pdf/2308.11082

Direct OA link when available

Concepts

Computer science, Feature engineering, Smart contract, Key (lock), Software bug, Software, Vulnerability (computing), Computer security, Lexicon, Security bug, Task (project management), Artificial intelligence, Software engineering, Deep learning, Engineering, Information security, Software security assurance, Programming language, Systems engineering, Security service, Blockchain

Top concepts (fields/topics) attached by OpenAlex

Cited by

0

Total citation count in OpenAlex

Related works (count)

10

Other works algorithmically related by OpenAlex

Full payload