Securing Sensitive Documents by Hybrid Blockchain (Bitcoin and Chia Network) through Artificial Intelligence

Hiyam Hashem Saeed; Ziyad Tariq Mustafa

doi:10.71229/0z24jx95

Authors

Hiyam Hashem Saeed Department of Computer Science, College of Science, University of Diyala, Iraq
Ziyad Tariq Mustafa Department of Computer Science, College of Science, University of Diyala, Iraq

DOI:

https://doi.org/10.71229/0z24jx95

Keywords:

Bitcoin Core v30, , Chia Network, , File Integrity Monitoring (FIM),, Hybrid Blockchain, , IRIS SOAR,, Ollama, , Smart Contract Auditing,, Wazuh SIEM.

Abstract

Traditional security models struggle to balance real-time detection, data sovereignty, and forensic immutability, and they often have high false-positive rates and weak audit trails. The paper proposes a solution that combines the concept of the AI revolution of sovereign AI with a hybrid blockchain approach to protect sensitive documents in six steps. Wazuh SIEM will be used for the collection of telemetry data, a locally hosted Gemma-7b LLM (Ollama) will provide context for the anomalies, and IRIS SOAR will provide an automated response based on the NIST standards. Bitcoin Core v30 features immutable forensic anchoring, and the Chia Network has failover with quick self-healing. Validation in an experimental environment shows a detection accuracy of 97.6%, an 85.5% decrease in False Positive Rate (FPR), and a drastic decrease in Mean Time to Respond (MTTR) from 642.5s to 16.15s. Furthermore, the system ensures no data is lost during a network partition and meets a new standard for resilient, forensically sound document security: a Recovery Time Objective (RTO) of 73.7s.

References

[1] K. Kent and M. Souppaya, “Guide to Computer Security Log Management,” NIST Special Publication, National Institute of Standards and Technology, no. 800-92, 2006.

[2] I. Ismail, R. Kurnia, and F. Widyatama et al., “Enhancing Security Operations Center: Wazuh Security Event Response with Retrieval-Augmented-Generation-Driven Copilot,” Sensors, MDPI, vol. 25, no. 3, pp. 1–26, 2025.

[3] A. Gupta, V. Krishnamurthy, and B. M. Sadler, “Eclipse Attack Detection on a Blockchain Network as a Non-Parametric Change Detection Problem,” Technical Report, arXiv, pp. 1–9, 2024[Online]. Available: http://arxiv.org/abs/2404.00538.

[4] L. Shekhtman and E. Waisbard, “EngraveChain: A Blockchain-Based Tamper-Proof Distributed Log System,” Future Internet, MDPI, vol. 13, no. 6, p. 143, 2021, doi: 10.3390/fi13060143.

[5] S. Axelsson, “The Base-Rate Fallacy and the Difficulty of Intrusion Detection,” ACM Transactions on Information and System Security, vol. 3, no. 3, pp. 186–205, 2000, doi: 10.1145/357830.357849.

[6] X. Han, S. Yuan, and M. Trabelsi, “LogGPT: Log Anomaly Detection via GPT,” Proceedings - 2023 IEEE International Conference on Big Data, BigData 2023, pp. 1117–1122, 2023, doi: 10.1109/BigData59044.2023.10386543.

[7] M. A. Gurabi, L. Nitz, R.-M. Castravet, R. Matzutt, A. Mandal, and S. Decker, “From Legacy to Standard: LLM-Assisted Transformation of Cybersecurity Playbooks into CACAO Format,” pp. 1–20, 2025, [Online]. Available: http://arxiv.org/abs/2508.03342.

[8] J. D. Morillo Reina and T. J. Mateo Sanguino, “Decentralized and Secure Blockchain Solution for Tamper-Proof Logging Events,” Future Internet, vol. 17, no. 3, 2025, doi: 10.3390/fi17030108.

[9] R. Choi, Y. Song, M. Jang, T. Kim, J. Ahn, and D. Im, “Smart Contract Vulnerability Detection Using Large Language Models and Graph Structural Analysis,” 2025, doi: 10.32604/cmc.2025.061185.

[10] Q. Liu, M. Wu, and J. Chen et al., “Exploring the potential of ChatGPT in detecting logical vulnerabilities in smart contracts,” Blockchain: Research and Applications, Elsevier, vol. 6, no. 4, p. 100294, 2025.

[11] Team, G., Riviere, M., Pathak, S., et al. (Gemini Team). (2024). Gemma: Open Models Based on Gemini Technology and Research. arXiv preprint arXiv:2403.08295.

[12] A. P. Guide, “Data Protection Regulations,” Book Chapter, Springer, pp. 1–20, 2025. doi: 10.1007/978-3-030-71522-9_300252.

[13] A. M. Wibowo and M. Sc, “ISO 27001: 2005 Information Security Management Systems,” Risk Management, 2005.

[14] W. Fedus, B. Zoph, and N. Shazeer, “Switch Transformers: Scaling to Trillion Parameter Models with Simple and Efficient Sparsity,” Journal of Machine Learning Research, vol. 23, pp. 1–40, 2022.

[15] Ollama, “Ollama Documentation (API and Local Model Runtime),” Online Documentation, Ollama, 2024.

[16] T. J. Dev Apps, “LLM Locally Using Ollama,” GitHub Repository. [Online]. Available: https://github.com/tsjdev-apps/llm-locally-using-ollama?spm=a2ty_o01.29997173.0.0.413455fbk7uZFP

[17] S. Islam and M. S. Rahman, “LogStamping: A blockchain-based log auditing approach for large-scale systems,” 2025.

[18] A. Ali, A. Khan, M. Ahmed, and G. Jeon, “BCALS: Blockchain-based secure log management system for cloud computing,” Transactions on Emerging Telecommunications Technologies, vol. 33, no. 4, pp. 1–20, 2022, doi: 10.1002/ett.4272.

[19] K. Venkatesan and S. B. Rahayu, “Blockchain security enhancement: an approach towards hybrid consensus algorithms and machine learning techniques,” Sci. Rep., vol. 14, no. 1, Dec. 2024, doi: 10.1038/s41598-024-51578-7.

[20] G. Xu, B. Guo, C. Su, X. Zheng, K. Liang, D. S. Wong, and H. Wang, “Am I eclipsed? A smart detector of eclipse attacks for Ethereum,” Computers & Security, Elsevier, vol. 88, 2020.

[21] P. Cichonski, “Computer Security Incident Handling Guide: Recommendations of the National Institute of Standards and Technology,” NIST Special Publication, vol. 800–61, p. 79, 2012, [Online]. Available: http://dx.doi.org/10.6028/NIST.SP.800-61r2%5Cnhttp://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

[22] M. Souppaya and K. Scarfone, “Guide to enterprise patch management planning,” no. April, pp. 1–18, 2022, [Online]. Available: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-40r4.pdf

[23] P. Rafiey and A. Namadchian, “Using LLMs as AI Agents to Identify False Positive Alerts in Security Operation Center,” pp. 0–14, 2024, [Online]. Available: https://www.researchsquare.com/article/rs-5420741/v1

[24] S. A. Chamkar, M. Zaydi, Y. Maleh, and N. Gherabi, “Improving Threat Detection in Wazuh Using Machine Learning Techniques,” Journal of Cybersecurity and Privacy, vol. 5, no. 2, pp. 1–25, 2025, doi: 10.3390/jcp5020034.

[25] “Wazuh, ‘Leveraging LLMs for alert enrichment (Proof of Concept guide),’ Wazuh Documentation.” [Online]. Available: https://docs.ollama.com/. Accessed: Jan. 31, 2026.

[26] M. S. Ozdayi, M. Kantarcioglu, and B. Malin, “Leveraging blockchain for immutable logging and querying across multiple sites,” BMC Med. Genomics, vol. 13, no. Suppl 7, pp. 1–7, 2020, doi: 10.1186/s12920-020-0721-2.

[27] Y. Xian, Z. Wang, J. Li, and H. Zhang et al., “Connecting Large Language Models with Blockchain: Advancing the Evolution of Smart Contracts from Automation to Intelligence,” Technical Report, arXiv, 2024.

[28] Y. Jin, M. Chen, L. Liu, and S. Zhao et al., “LLM-BSCVM: An LLM-Based Blockchain Smart Contract Vulnerability Management Framework,” Technical Report, arXiv, 2025.

[29] P. J. Huber, “Robust Estimation of a Location Parameter,” The Annals of Mathematical Statistics, vol. 35, no. 1, pp. 73–101, 1964, doi: 10.1214/aoms/1177703732.

[30] UNSW Canberra, “UNSW-NB15 Dataset,” Network Security Dataset, University of New South Wales, 2015.

[31] SmartBugs Team, “SmartBugs: A Framework for Analyzing Solidity Smart Contracts,” Software Framework, GitHub, 2024.

[32] Selective Arabic Cyberbullying Detection with Multi-View Modeling, Risk Triage, and Human Deferral. (2026). Al-Noor Journal of Engineering Management and Computer Science, 2(4), 25-36. https://doi.org/10.71229/er3kch93.