CKG-LLM: LLM-Assisted Detection of Smart Contract Access Control Vulnerabilities Based on Knowledge Graphs
By: Xiaoqi Li , Hailu Kuang , Wenkai Li and more
Potential Business Impact:
Finds hidden bugs in computer money contracts.
Traditional approaches for smart contract analysis often rely on intermediate representations such as abstract syntax trees, control-flow graphs, or static single assignment form. However, these methods face limitations in capturing both semantic structures and control logic. Knowledge graphs, by contrast, offer a structured representation of entities and relations, enabling richer intermediate abstractions of contract code and supporting the use of graph query languages to identify rule-violating elements. This paper presents CKG-LLM, a framework for detecting access-control vulnerabilities in smart contracts. Leveraging the reasoning and code generation capabilities of large language models, CKG-LLM translates natural-language vulnerability patterns into executable queries over contract knowledge graphs to automatically locate vulnerable code elements. Experimental evaluation demonstrates that CKG-LLM achieves superior performance in detecting access-control vulnerabilities compared to existing tools. Finally, we discuss potential extensions of CKG-LLM as part of future research directions.
Similar Papers
LLM-empowered knowledge graph construction: A survey
Artificial Intelligence
Helps computers understand and organize information better.
Ask Safely: Privacy-Aware LLM Query Generation for Knowledge Graphs
Information Retrieval
Keeps private data safe when asking computers questions.
Are Large Language Models Effective Knowledge Graph Constructors?
Computation and Language
Helps computers build better knowledge maps.