AI 中文总结
针对多智能体系统传统远程证明的局限，本文提出基于区块链的D-MUTRA框架，实现智能体间的持续相互证明，可检测恶意软件修改，且扩展时开销可忽略。
AI 中文摘要
多智能体系统（MAS）包含自主软件智能体，它们协作完成关键网络物理领域的复杂任务，包括多机器人协同与工业物联网（IIoT）。在这类分布式环境中，被攻陷的智能体可能执行修改后的软件却表现得可信，导致其他智能体基于错误信息行动并破坏任务，因此智能体在运行过程中必须建立并维持相互信任。远程证明（RA）是实现这一目标的成熟技术，可让远程验证方评估潜在被证明方设备的完整性。然而，传统RA方法在MAS中存在显著局限：完整性保证仅局限于启动或应用加载时间，设计依赖集中式可信验证方或安全硬件，且证明记录缺乏透明度与可审计性。为解决这些局限，本文提出D-MUTRA，这是一个基于区块链的框架，引入了一种相互RA协议，智能体在验证对等方完整性的同时测量自身运行时完整性，兼具证明方与验证方的角色。该框架完全在软件中运行，依赖两个组件：安全即服务（Security-as-a-Service），为智能体配备轻量级测量与验证能力；智能合约，以去中心化且透明的方式协调证明协议。我们使用Hyperledger Besu在私有以太坊区块链上实现了概念验证，并在基于机器人操作系统（ROS）与Gazebo模拟器构建的群体机器人场景中对其进行评估。结果表明，D-MUTRA可让智能体持续相互证明，检测恶意软件修改，且在受保护应用中扩展至大规模部署时开销可忽略不计。
英文摘要
Multi-agent systems (MAS) comprise autonomous software agents that collaborate to perform complex tasks in critical cyber-physical domains, including multi-robot coordination and the Industrial Internet of Things (IIoT). In such distributed environments, a compromised agent may execute modified software while appearing trustworthy, causing other agents to act on false information and corrupting the mission. Agents must therefore establish and maintain mutual trust throughout operation. Remote attestation (RA) is a well-established technique for this purpose, enabling a remote verifier to assess the integrity of a potentially compromised prover device. However, conventional RA approaches face significant limitations in MAS: integrity guarantees are restricted to boot or application-load time, designs rely on centralized trusted verifiers or security hardware, and attestation records lack transparency and auditability. To address these limitations, this paper presents D-MUTRA, a blockchain-based framework that introduces a mutual RA protocol in which agents measure their runtime integrity while verifying that of their peers, acting as both prover and verifier. The framework operates entirely in software and relies on two components: a Security-as-a-Service that instruments agents with lightweight measurement and verification capabilities, and a smart contract that coordinates the attestation protocol in a decentralized and transparent manner. We implement a proof-of-concept on a private Ethereum blockchain using Hyperledger Besu and evaluate it in a swarm robotics scenario built with Robot Operating System (ROS) and the Gazebo simulator. Results show that D-MUTRA enables agents to continuously attest one another, detects malicious software modifications, and scales to large deployments with negligible overhead on protected applications.
