arXiv:2608.00104cs.CRcs.AI2026-08中稿 · IEEE Transactions …

用区块链构建零信任AI技能网络,解决虚假声明与安全漏洞问题。

Skillsets on the Chain: A Blockchain-based Zero-Trust Framework for Agentic AI Networking

论文配图:Skillsets on the Chain: A Blockchain-based Zero-Trust Framework for Agentic AI Networking
图 1 · 摘自论文原文
  • 通过链上元数据管理+链下审计,实现技能集全生命周期可信管控。
  • 验证准确率100%,可识别10个恶意技能并自愈恢复,跨领域泛化达83.91%。
  • 适合构建高安全性的分布式AI协作系统,尤其关注可信推理与抗攻击能力。

智能体网络(AgentNet)依赖第三方技能实现与多智能体协作,但存在声明与能力不一致及安全漏洞问题。本文提出TrustAgentNet,一种双层区块链保护的零信任框架:全局技能链(CoS)管理技能元数据,由专用智能体执行链下审计,保持轻量链上共识;动态创建任务导向的协作链(CoC),支持无信任的分布式协作。理论分析三者间安全、性能与开销的权衡,并实证验证。硬件原型实验表明,相比无区块链默认信任方案,零信任开销主要来自链下推理,链上仅产生少量日志成本。验证流程在50个AI模型中实现100%准确率,正确识别40个诚实技能、拦截10个恶意技能,并在171个ClawHub技能的1478个特征上实现83.91%准确率与0.85 F1-score。对抗实验显示其可自主修复受攻击技能集。

原文摘要 · Abstract (English)

Agentic AI networking (AgentNet) systems rely heavily on third-party skillset implementations and distributed multi-agent collaboration, yet they face major claim-to-capability inconsistencies and security vulnerabilities under trust-by-declaration assumptions. To bridge this gap, this paper proposes TrustAgentNet, a dual-tier blockchain-secured zero-trust framework. Specifically, a global Chain of Skillsets (CoS) governs the lifecycle of skillset metadata with protocols empowered by specialized agents to enforce off-chain auditing while maintaining lightweight on-chain cryptographic consensus. Furthermore, transient, task-oriented Chains of Collaboration (CoC) are dynamically established to enable trustless distributed multi-agent collaboration. Theoretical analysis of the three-way trade-off among security level, task performance, and resource overhead is provided and empirically validated. Experimental results on a hardware prototype demonstrate that compared with no-blockchain trust-by-default baselines, the zero-trust overhead of TrustAgentNet is dominated by off-chain inference, while the blockchain layer incurs minor ledger costs via the ledger-IPFS storage and on/off-chain integration design. Crucially, the proposed verification pipeline achieves a flawless 100% accuracy across 50 AI models, correctly validating 40 honest skillsets and intercepting 10 adversarial ones, and generalizes to non-AI domains with an 83.91% accuracy and a 0.85 F1-score across 1478 features from 171 ClawHub skills. Adversarial experiments further show that TrustAgentNet enables autonomous skillset self-recovery against various malicious attacks.

AI网络区块链零信任安全验证

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。