ABSTRACT In this article, we delve into the intersection of blockchain technology and artificial intelligence (AI) to fortify the security of electronic health records (EHRs). Existing EHR systems face challenges like interoperability issues, user interface complexities, and data security concerns, hindering seamless patient care and healthcare delivery. This article thoroughly explores the hurdles associated with EHR security and investigates the potential of employing blockchain and AI solutions to mitigate these challenges. The review underscores the necessity for resilient, interoperable systems to protect sensitive health information by pinpointing opportunities for collaborative strategies. In essence, this article contributes valuable perspectives on the dynamic landscape of EHR security, guiding future research and development at the crossroads of blockchain; we presented a case study on EHR security, customized care, predictive analytics, and more efficient healthcare delivery. Using case studies as illustrative examples, the article scrutinizes practical applications, shedding light on successful implementations and areas requiring refinement. Several outcomes for the predictive analytics of patients' surgeries are shown in this case study. Next, we compare blockchain‐based EHR systems with existing, non‐blockchain‐based EHR systems. Finally, we present the concluding remarks with future directions for integrating blockchain, AI, and EHR systems.
Artificial Intelligence in Healthcare and Education
Electronic health records (EHRs) are increasingly replacing traditional paper-based medical records due to their speed, security, and ability to eliminate redundant data. However, challenges such as EHR interoperability and privacy concerns remain unresolved. Blockchain, a distributed ledger technology comprising connected, encrypted data blocks, presents a promising solution. This study explores how blockchain technology can revolutionize hospital EHR management. Our proposed solution securely transfers medical records between patients and doctors using the InterPlanetary File System (IPFS) and the Ethereum platform. Utilizing smart contracts automates data transfers, ensuring patient anonymity and reducing computational complexity while securely storing patient data on the network. Patient records are stored locally on the Ganache server, with the front end managed using HTML, CSS, ReactJS, and JavaScript, and the backend developed in Solidity. Blockchain technologies combined with Role- Based access control instead of attribute -based access control. The system's throughput increases linearly with the number of users and requests, enhancing the framework's efficiency and scalability. The minimum recorded latency is 14 ms.
How AI models should deal with political topics has been discussed, but it remains challenging and requires better governance. This paper examines the governance of large language models through individual and collective deliberation, focusing on politically sensitive videos. We conducted a two-step study: interviews with 10 journalists established a baseline understanding of expert video interpretation; 114 individuals through deliberation using InclusiveAI, a platform that facilitates democratic decision-making through decentralized autonomous organization (DAO) mechanisms. Our findings reveal distinct differences in interpretative priorities: while experts emphasized emotion and narrative, the general public prioritized factual clarity, objectivity, and emotional neutrality. Furthermore, we examined how different governance mechanisms - quadratic vs. weighted voting and equal vs. 20/80 voting power - shape users' decision-making regarding AI behavior. Results indicate that voting methods significantly influence outcomes, with quadratic voting reinforcing perceptions of liberal democracy and political equality. Our study underscores the necessity of selecting appropriate governance mechanisms to better capture user perspectives and suggests decentralized AI governance as a potential way to facilitate broader public engagement in AI development, ensuring that varied perspectives meaningfully inform design decisions.
Smart contracts are programs running on the blockchain, and once deployed, they cannot be modified. Integer overflow and underflow, have always been one of the most common vulnerabilities in Ethereum, and to this day, integer overflow and underflow incidents still occur, resulting in financial losses or functional failures. Currently, many vulnerability detection tools can detect Integer overflow/underflow. However, these tools often produce false positives. In order to better understand why existing vulnerability detection tools generate false positive reports and to guide us in improving the accuracy of vulnerability detection tools, it is necessary to conduct empirical research on the causes of false positives in arithmetic bugs in smart contracts. This work empirically studies the detection results of well-known vulnerability detection tools such as Mythril and Osiris, and analyzes the causes for false positive reports. We randomly selected 1000 smart contracts with arithmetic bugs from the SmartBugs Wild Dataset, along with 2343 corresponding vulnerability detection reports, as the subjects of this study. After manual screening, we obtained 449 false positive reports. After further manual analysis, we identified 8 types of false positive causes, covering the majority of false positive reports, and provided statistics on the distribution of causes. We believe that our findings play a positive role in reducing the false positive rate and improving the accuracy of future vulnerability detection tools.
Abstract To address the challenges of internal security policy compliance and dynamic threat response in organizations, we present a novel framework that integrates artificial intelligence (AI), blockchain, and smart contracts. We propose a system that automates the enforcement of security policies, reducing manual effort and potential human error. Utilizing AI, we can analyse cyber threat intelligence rapidly, identify non-compliances and automatically adjust cyber defence mechanisms. Blockchain technology provides an immutable ledger for transparent logging of compliance actions, while smart contracts ensure uniform application of security measures. The framework’s effectiveness is demonstrated through simulations, showing improvements in compliance enforcement rates and response times compared to traditional methods. Ultimately, our approach provides for a scalable solution for managing complex security policies, reducing costs and enhancing the efficiency while achieving compliance. Finally, we discuss practical implications and propose future research directions to further refine the system and address implementation challenges.
Ethereum is a distributed, peer-to-peer blockchain infrastructure that has attracted billions of dollars. Perhaps due to its success, Ethereum has become a target for various kinds of attacks, motivating researchers to explore different techniques to identify vulnerabilities in EVM bytecode (the language of the Ethereum Virtual Machine)—including formal verification, symbolic execution, and fuzz testing. Although recent studies empirically compare smart contract fuzzers, there is a lack of literature investigating how simpler grey-box fuzzers compare to more advanced ones. To fill this gap, in this paper, we present DogeFuzz, an extensible infrastructure for fuzzing Ethereum smart contracts, currently supporting black-box fuzzing and two grey-box fuzzing strategies: coverage-guided grey-box fuzzing (DogeFuzz-G) and directed grey-box fuzzing (DogeFuzz-DG). We conduct a series of experiments using benchmarks already available in the literature and compare the DogeFuzz strategies with state-of-the-art fuzzers for smart contracts. Surprisingly, although DogeFuzz does not leverage advanced techniques for improving input generation (such as symbolic execution or machine learning), DogeFuzz outperforms sFuzz and ILF, two state-of-the-art fuzzers. Nonetheless, the Smartian fuzzer shows higher code coverage and bug-finding capabilities than DogeFuzz.
Jaehyun Kim, Thi-Thu-Huong Le, Sangmyeong Lee, Howon Kim
In recent years, the proliferation of blockchain technology has led to the widespread adoption of smart contracts, particularly on the Ethereum platform. However, these smart contracts are prone to vulnerabilities that can be exploited, leading to significant financial losses and security breaches. This paper explores the application of Distil-BERT, a distilled version of the BERT (Bidirectional Encoder Representations from Transformers) model, to detect vulnerabilities in Ethereum smart contracts. By fine-tuning Distil-BERT on the SB-curate dataset, a curated dataset of vulnerable Solidity smart contracts, we achieve a performance accuracy exceeding 97%. We provide natural language processing (NLP) techniques that can be leveraged to enhance the accuracy and efficiency of these methods. Our experiments show that Distil-BERT can effectively identify common vulnerabilities, such as reentrancy and integer overflows, outperforming traditional static analysis tools. This research contributes to developing more secure smart contract systems and offers insights into integrating advanced machine learning models in blockchain security.
This paper into the critical issue of vulnerability detection in smart contracts, focusing on identifying vulnerabilities, proposing mitigation strategies, and developing techniques for detecting Ponzi schemes within smart contracts. By understanding and addressing these vulnerabilities, we aim to enhance the security and robustness of blockchain-based applications and ecosystems.
The advent of blockchain technology has revolutionized various sectors by providing transparency, immutability, and automation. Central to this revolution are smart contracts, which facilitate trustless and automated transactions across diverse domains. However, the proliferation of smart contracts has exposed significant security vulnerabilities, necessitating advanced analysis techniques. Data dependency analysis is a critical program analysis method used to enhance the testing and security of smart contracts. This paper introduces Sligpt, an innovative methodology that integrates a large language model (LLM), specifically GPT-4o, with the static analysis tool Slither, to perform data dependency analyses on Solidity smart contracts. Our approach leverages both the advanced code comprehension capabilities of GPT-4o and the advantages of a traditional analysis tool. We empirically evaluate Sligpt using a curated dataset of Ethereum smart contracts. Sligpt achieves significant improvements in precision, recall, and overall analysis depth compared with Slither and GPT-4o, providing a robust solution for data dependency analysis. This paper also discusses the challenges encountered, such as the computational resource requirements and the inherent variability in LLM outputs, while proposing future research directions to further enhance the methodology. Sligpt represents a significant advancement in the field of static analysis on smart contracts, offering a practical framework for integrating LLMs with static analysis tools.
The integration of Blockchain technology and Artificial Intelligence (AI) is revolutionizing data management and business intelligence. Blockchain, with its decentralized, immutable ledger, ensures data integrity and security, while AI enhances data analysis through advanced algorithms and predictive capabilities. This article explores the synergy between these two transformative technologies, examining how their combined strengths can address modern challenges in data security and business operations. The paper begins with an overview of Blockchain and AI, detailing their foundational principles and recent advancements. It then delves into their applications in enhancing data security, highlighting Blockchain's role in providing encryption and immutability and AI's capabilities in threat detection and response. The discussion extends to their impact on business intelligence, showcasing how Blockchain contributes to transparent and verifiable data, while AI drives advanced analytics and decision-making. Real-world case studies illustrate successful implementations of Blockchain and AI integration, demonstrating their potential to revolutionize various industries. The article also addresses technical challenges, privacy concerns, and regulatory issues associated with these technologies. Finally, it outlines future directions for research and innovation, emphasizing the need for continued exploration of their combined potential. By providing a comprehensive analysis of Blockchain and AI's transformative impact, this article aims to offer valuable insights for researchers, practitioners, and policymakers seeking to leverage these technologies for improved data security and business intelligence.
Federated Learning (FL) is a technique in the field of machine learning that prioritizes privacy by allowing collaborative model training without revealing data. This article explores the basics of FL and its importance in protecting data privacy in sectors such as healthcare, finance, and industrial engineering. By using data sources FL enables the development of strong and adaptable AI models without centralizing sensitive information. We delve into the methodologies behind FL including secure multiparty computation, differential privacy, and homomorphic encryption. Additionally, we look at the ways FL is used, such as speeding up medical research improving financial security and streamlining industrial processes. The challenges related to FL - like communication diverse data distributions and scalability - are also addressed. Lastly, we discuss trends, in FL that focus on enhancing privacy techniques and complying with regulations. This thorough overview highlights how FL can revolutionize AI advancement while upholding privacy standards. Keywords: Federated Learning, Privacy Preservation, Decentralized Machine Learning, Secure Multiparty Computation, Differential Privacy, Healthcare AI, Industrial Engineering, Data Silos, Collaborative Learning.
Tiago Nunes, Paulo Rupino da Cunha, João Mendes de Abreu, J. Duarte · 5 authors
Amid global health challenges, resilient health systems require continuous innovation and progress. Stakeholders highlight the critical role of digital technologies in accelerating this progress. However, the digital health field faces significant challenges, including the sensitivity of health data, the absence of evidence-based standards, data governance issues, and a lack of evidence on the impact of digital health strategies. Overcoming these challenges is crucial to unlocking the full potential of digital health innovations in enhancing healthcare delivery and outcomes. Prioritizing security and privacy is essential in developing digital health solutions that are transparent, accessible, and effective. Non-fungible tokens (NFTs) have gained widespread attention, including in healthcare, offering innovative solutions and addressing challenges through blockchain technology. This paper addresses the gap in systematic-level studies on NFT applications in healthcare, aiming to comprehensively analyze use cases and associated research challenges. The search included primary studies published between 2014 and November 2023, searching in a balanced set of databases compiling articles from different fields. A review was conducted following the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) framework and strictly focusing on research articles related to NFT applications in the healthcare sector. The electronic search retrieved 1902 articles, ultimately resulting in 15 articles for data extraction. These articles span applications of NFTs in medical devices, pathology exams, diagnosis, pharmaceuticals, and other healthcare domains, highlighting their potential to eliminate centralized trust sources in health informatics. The review emphasizes the adaptability and versatility of NFT-based solutions, indicating their broader applicability across various healthcare stages and expansion into diverse industries. Given their role in addressing challenges associated with enhancing data integrity, availability, non-repudiation, and authentication, NFTs remain a promising avenue for future research within digital health solutions.
Open access
Blockchain Technology Applications and Security
Artificial Intelligence in Healthcare and Education
Smart contracts (SCs) significance and popularity increased exponentially with the escalation of decentralised applications (dApps), which revolutionised programming paradigms where network controls rest within a central authority. Since SCs constitute the core of such applications, developing and deploying contracts without vulnerability issues become key to improve dApps robustness to external attacks. This paper introduces a dataset that combines smart contract metrics with vulnerability data identified using Slither, a leading static analysis tool proficient in detecting a wide spectrum of vulnerabilities. Our primary goal is to provide a resource for the community that supports exploratory analysis, such as investigating the relationship between contract metrics and vulnerability occurrences. Further, we discuss the potential of this dataset for the development and validation of predictive models aimed at identifying vulnerabilities, thereby contributing to the enhancement of smart contract security. Through this dataset, we invite researchers and practitioners to study the dynamics of smart contract vulnerabilities, fostering advancements in detection methods and ultimately, fortifying the resilience of smart contracts.
Dhanya Pramod, S. Vijayakumar Bharathi, Kanchan Patil
In recent years, the growing interest in non-fungible tokens (NFTs) has triggered substantial academic and commercial interest. NFTs, are disruptively transforming the realms of art, entertainment, and investment. Exploring the factors that drive individuals to invest in these digital collectibles is central for understanding the broader implications of this innovative financial trend. In this direction, our study investigated the user characteristics, technology characteristics, social influence the user’s intention to invest in NFTs, moderated by investor’s habits. This research extended the theory of trying by including precursors of the NFT trial attitude, such as optimism, innovativeness, discomfort, and insecurity (users); Governance considerations and extendibility (process); and digital asset ownership and indivisibility (technology) and social influence. Structural equation modeling analyzed the data collected from 278 investors through a structured questionnaire. The finding indicates that a trying attitude significantly impacted the intentions to invest in NFTs. Precursors impacting trying attitude included optimism, innovativeness, insecurity, digital asset ownership, indivisibility, and social influence. However, discomfort, Governance considerations, and extendibility were not significant. The study offered theoretical and practical implications to individual investors and the broader digital asset landscape and slated directions for future research.
Smart contracts are programs with mutable state. Transactions submitted to these contracts trigger functions that often modify state. Nodes of the Ethereum blockchain schedule such transactions in a nondeterministic order, potentially leading to races between transactions and concurrency issues. When the outcome of a smart contract varies depending on the order in which transactions are processed, we have a Transaction Ordering Dependency (TOD). TOD enables malicious actors to profit from a smart contract, similar to the well-known frontrunning vulnerability. Existing approaches for detecting TOD in Ethereum smart contracts yield a high rate of false positives and false negatives. To help contract developers and testers detect TOD vulnerabilities with enhanced precision, we propose and evaluate an analysis based on information flow in our tool TODChecker1. We evaluate our approach using a benchmark comprising 513 vulnerable transactions involving 235 real-world Ethereum smart contracts susceptible to frontrunning attacks. Our evaluation finds that our approach outperforms existing approaches, including Oyente, Securify, SAILFISH, TODler, and Nyx, in precision, runtime, and in identifying novel TOD vulnerabilities.
This deliverable presents the second iteration of the AI4Gov Decentralised Data Governance (DDG) model, focusing on the implementation of mechanisms that ensure data provenance, reliability, and GDPR-compliant privacy within a decentralized architecture. It details the finalized system design and supporting prototypes that enable transparent data governance and the execution of decentralized business processes through smart contracts, while introducing a redesigned, citizen-centric approach that facilitates participation in open and collaborative governance processes. The document outlines key architectural improvements, including the adoption of decentralized identity frameworks and the integration of Digital Autonomous Organization (DAO) principles for self-governed units. It further discusses the updated technology stack, system functionalities, and relevant regulatory considerations, providing a validated and extensible framework for trustworthy, participatory, and privacy-preserving data governance in AI-driven public-sector applications.
Md Facklasur Rahaman, Mohtasin Golam, Md Raihan Subhan, Esmot Ara Tuli · 6 authors
The immersive metaverse environment offers distinct social interactions and opportunities, yet it also presents significant challenges in securely managing misbehavior, including hate speech, bullying, and harassment. Existing solutions primarily focus on detecting such behavior through artificial intelligence but lack robust mechanisms for management and governance. This gap is critical as the metaverse continues to mirror complex real-world interactions and centralized authority systems prove vulnerable to compromise. Our research introduces a novel framework, Meta-Governance, which not only detects but also effectively manages and governs user behavior through smart contracts, ensuring a secure, fair, and transparent metaverse environment. The system incorporates behavior monitoring to identify and condemn inappropriate behavior, specifically targeting problems such as hate speech and cyberbullying. Occurrences of misbehavior are permanently preserved on the blockchain to ensure the capacity to trace and bear accountability. In this article, we deploy a Natural Language Processing (NLP) model and a smart contract-based framework to address unusual behavior monitoring, access control, and credit scoring. Deep learning models are used to identify and classify linguistic patterns that may be considered hazardous. Blockchain technology addresses virtual misconduct using smart contracts, while a distinctive credit scoring mechanism ensures that users are held responsible for making disrespectful statements. The efficacy of the proposed smart contract is comprehensively evaluated within the context of a private Hyperledger Besu system. The integration of AI and blockchain may greatly improve the security and inclusiveness of the metaverse, highlighting the crucial role of these technologies in combating hate speech and enhancing user engagement.
With the increasing popularity of blockchain, different blockchain platforms coexist in the ecosystem (e.g., Ethereum, BNB, EOSIO, etc.), which prompts the high demand for cross-chain communication. Cross-chain bridge is a specific type of decentralized application for asset exchange across different blockchain platforms. Securing the smart contracts of cross-chain bridges is in urgent need, as there are a number of recent security incidents with heavy financial losses caused by vulnerabilities in bridge smart contracts, as we call them Cross-Chain Vulnerabilities (CCVs). However, automatically identifying CCVs in smart contracts poses several unique challenges. Particularly, it is non-trivial to (1) identify application-specific access control constraints needed for cross-bridge asset exchange, and (2) identify inconsistent cross-chain semantics between the two sides of the bridge. In this paper, we propose SmartAxe, a new framework to identify vulnerabilities in cross-chain bridge smart contracts. Particularly, to locate vulnerable functions that have access control incompleteness, SmartAxe models the heterogeneous implementations of access control and finds necessary security checks in smart contracts through probabilistic pattern inference. Besides, SmartAxe constructs cross-chain control-flow graph (xCFG) and data-flow graph (xDFG), which help to find semantic inconsistency during cross-chain data communication. To evaluate SmartAxe, we collect and label a dataset of 88 CCVs from real-attacks cross-chain bridge contracts. Evaluation results show that SmartAxe achieves a precision of <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML" display="inline"> <mml:mn>84.95</mml:mn> <mml:mo>%</mml:mo> </mml:math> and a recall of <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML" display="inline"> <mml:mn>89.77</mml:mn> <mml:mo>%</mml:mo> </mml:math> . In addition, SmartAxe successfully identifies 232 new/unknown CCVs from 129 real-world cross-chain bridge applications (i.e., from 1,703 smart contracts). These identified CCVs affect a total amount of digital assets worth 1,885,250 USD.
Background: Research has been done on the vulnerabilities of Ethereum smart contract detection since the emergence of blockchain technologies. Ethereum is one of the most popular platforms for DApps (decentralized applications) and smart contracts but turns more undoubtedly when their number and popularity grow. Methods: The study evaluates different detection methods including static analysis, dynamic code analysis, symbolic execution, and machine learning. Findings: The performance metrics on key areas, e.g. detection time, true positive rate, false positive rate, and scalability are emphasized in this evaluation analysis. These inferences imply that although Static Analysis can provide fast detection and high accuracy, Machine Learning is better at High scalability. The study also identifies trending flaws often encountered such as re-entrancy attacks and lack of input validation and stresses further the necessity of strong security methods. Besides, you may consider the sensitivity analysis in different network load scenarios as it shows the efficiency of detection technique in changing operational settings. Novelty and applications: Overall, the research brings a reliable development to smart contracts in Ethereum's security industries through analyzing and profiling vulnerability types and performance metrics that inform the development of more stable and efficient security activities for distributed applications.
Helena Anišić, Дину Драган, Dušan Gajić, Veljko Petrović
The evolution and widespread adoption of Distributed Ledger Technology (DLT) across various sectors underscore its potential to transform conventional processes and systems. Among the innovations spurred by DLT, smart contracts emerge as a pivotal application, automating contractual obligations. However, the development of smart contracts poses significant challenges, particularly for non-programmers, due to the necessity for specialised programming skills and understanding of blockchain technology. This complexity restricts broader user engagement and risks the incorporation of errors with potentially severe consequences. To address this challenge, researchers have proposed various approaches to enable non-programmers to create smart contracts in a user-friendly way. Through this study, we seek to answer pivotal research questions regarding the spectrum of available development approaches for non-programmers and the methods employed to assess their usability. Our findings indicate a notable scarcity of user-centered evaluations, underscoring the need for more robust and comparative usability testing in this domain. By illuminating the current landscape and identifying areas for further research and development, this paper endeavors to contribute to the inclusive expansion of smart contract technology, ensuring its accessibility and utility for a broader user base.
The rapid advancement and integration of Artificial Intelligence (AI) across critical sectors — including healthcare, finance, defense, and infrastructure — have exposed an often-overlooked risk: vulnerabilities within the AI supply chain. This research examines the security challenges and potential threats affecting AI model development and deployment, focusing on adversarial attacks, data poisoning, model theft, and compromised third-party components. By dissecting the AI supply chain into its core stages — data sourcing, model training, deployment, and maintenance — this study identifies key entry points for malicious actors. The paper proposes a multi-layered security framework combining blockchain-based data provenance, federated learning for decentralized model training, and zero-trust architecture to ensure secure deployment. Additionally, it explores how adversarial training, model watermarking, and real-time anomaly detection can mitigate risks without sacrificing model performance. Case studies of high-profile AI breaches are analyzed to demonstrate the consequences of unsecured pipelines, emphasizing the urgency of securing AI systems.
Open access
Ethics and Social Impacts of AI
Artificial Intelligence in Healthcare and Education