PERCI: Smart Contract Verification Process for IoT Applications

As the proliferation of Internet of Things (IoT) devices escalates, data traffic on networks increases, highlighting the need for a secure environment to mitigate vulnerabilities. In this context, Blockchain emerges as a promising technology for IoT security, facilitating decentralized, encrypted, and immutable data recording through network consensus. Smart contracts, which are self-executing programs on the Blockchain, eliminate the need for intermediaries, thereby enabling secure and transparent data transfers. However, they are susceptible to security flaws that can compromise data integrity and user safety. Conducting tests prior to deployment can uncover errors and minimize risks. This work proposes the PERCI process, which delineates verification steps for identifying vulnerabilities in IoT smart contracts by integrating static and dynamic analyses. To validate this process, a smart contract was incorporated with an IoT application utilizing a smart lamp to represent weather conditions, demonstrating the effectiveness of this combined approach in detecting vulnerabilities.