资源描述:
《peertopeer harnessing the power of disruptiveteehnologies.》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、Peer-To-Peer:HarnessingthePowerofDisruptiveTechnologiesChapter18:SecurityJonUdell,BYTE.com,andNimishaAsthagiriandWalterTuvell,GrooveNetworksSecurityishardenoughintraditionalnetworksthatdependoncentralservers.It'sharderstillinpeer-to-peernetworks,particularlywhen
2、youwanttoauthenticateyourcommunicationpartnersandexchangedataonlywithpeopleyoutrust.Earlierchaptersstressedprotectionforusers'anonymity.Theneedtoassertidentityisactuallymorecommonthantheneedtohideit,thoughthetwoarenotmutuallyexclusive.AsshowninChapter16,Accounta
3、bility,systemsthatassignpseudonymstousersneednotabsolveusersofresponsibility.Thischaptertouchesontheinterplayofidentityandpseudonymitytoo,butwillmainlyfocusonhowtoauthenticateusersandensuretheycancommunicatesecurelyinapeer-to-peersystem.AtGrooveNetworksInc.,we'v
4、edevelopedasystemthatprovidesatypeofstrongsecurityconsistentwithGroove'svisionofapeer-to-peersystem.Thedetailsaredescribedinthischapter.Wehopethatourworkcanservenotonlyasproofthattraditionalconservativesecurityprinciplescancoexistwithanoveldistributedsystem,buta
5、lsoasaguidetodevelopersinotherprojects.Grooveisapeer-to-peergroupwaresystem.Beforewefocusonitssecurityarchitecture,weshouldfirstexplainitsgoalsandtheenvironmentinwhichitoperates.UsingGroove,teamsofcollaboratorsformspontaneoussharedspacesinwhichtheycollectthedocu
6、ments,messages,applications,andapplication-specificdatarelatedtogroupprojects.Thesoftware(whichisavailableforWindowsnowandforLinuxsoon)worksidenticallyforusersonaLAN,behindcorporatefirewalls,behindDSLorcable-modemNetworkAddressTranslation(NAT),ondial-upconnectio
7、nswithdynamicIPaddresses,orinanycombinationofsuchcircumstances.ThekeybenefitsofGroovesharedspacesare:SpontaneityGrooveneedsnoadministrator.NobodyhastowaitforITtocreatethesupportsystemforaproject.Userscandothisforthemselves,easilyandrightaway.SecuritySharedspaces
8、are,ineffect,instantvirtualprivatenetworks(VPNs).ContextThesharedspaceprovidesacontextthathelpsusersunderstandthenature,purpose,andhistoryofallthemessagesanddocuments