providing witness anonymity under peer to peer setting

《providing witness anonymity under peer to peer setting》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、324IEEETRANSACTIONSONINFORMATIONFORENSICSANDSECURITY,VOL.5,NO.2,JUNE2010ProvidingWitnessAnonymityUnderPeer-to-PeerSettingsBoZhu,Member,IEEE,SanjeevSetia,SushilJajodia,SeniorMember,IEEE,andLingyuWang,Member,IEEEAbstractInthispaper,weintroducetheconceptofwitnessandknowledgeofeachother,andneed

2、awaytoevaluatetheanonymityforpeer-to-peersystems,aswellasothersystemswithriskinvolvedinatransaction.Toaddressthisissue,severalthepeer-to-peernature.Witnessanonymitycombinestheseem-researchstudies[10],[11],[20],[36]haveproposedmecha-inglyconflictingrequirementsofanonymity(forhonestpeerswhonis

3、msforbuildingandusingreputation-basedtrustmodelsinreportonthemisbehaviorofotherpeers)andaccountability(formaliciouspeersthatattempttomisusetheanonymityfeaturetopeer-to-peersystems.Inthesesystems,apeerisassignedatrustslanderhonestpeers).WeproposetheSecureDeepThroat(SDT)valueorreputationbased

4、onatrustmetric.Althoughvariousprotocoltoprovideanonymityforthewitnessesofmaliciousorsystemsdifferinhowthismetricisdefined,ingeneral,thetrustselfishbehaviortoenablesuchpeerstoreportonthisbehaviorvalueassociatedwithapeeriscalculatedbasedonthefeedbackwithoutfearofretaliation.Ontheotherhand,inSDT

5、,themisuseprovidedbyotherpeers.Peersratetheperformanceorbehaviorofanonymityisrestrainedinsuchawaythatanymaliciouspeerattemptingtosendmultipleclaimsagainstthesameinnocentpeerofanotherpeerbasedontheirpreviousinteractions.Whenaforthesamereason(i.e.,thesamemisbehaviortype)canbeiden-peerencounte

6、rsanewpeer,itcanquerythenetworkfortrusttified.WealsodescribehowSDTcanbeusedintwomodes.Theratingsofthatpeer,andthenbasedonthereceivedfeedback,itactivemodecanbeusedinscenarioswithreal-timerequirements,candecidewhethertoproceedwiththetransaction.e.g.,detectingandpreventingthepropagationofpeer-t

7、o-peerTherearethreeimportantrequirementsforthesetrustman-worms,whereasthepassivemodeissuitableforscenarioswithoutstrictreal-timerequirements,e.g.,query-basedreputationsys-agementsystems.tems.WeanalyzethesecurityandoverheadofSDT,andpresent1)Reliability:Ap