TrustGuard: countering vulnerabilities in reputation management for decentralized overlay networks

ABSTRACT

Reputation systems have been popular in estimating the trustworthiness and predicting the future behavior of nodes in a large-scale distributed system where nodes may transact with one another without prior knowledge or experience. One of the fundamental challenges in distributed reputation management is to understand vulnerabilities and develop mechanisms that can minimize the potential damages to a system by malicious nodes. In this paper, we identify three vulnerabilities that are detrimental to decentralized reputation management and propose TrustGuard - a safeguard framework for providing a highly dependable and yet efficient reputation system. First, we provide a dependable trust model and a set of formal methods to handle strategic malicious nodes that continuously change their behavior to gain unfair advantages in the system. Second, a transaction based reputation system must cope with the vulnerability that malicious nodes may misuse the system by flooding feedbacks with fake transactions. Third, but not least, we identify the importance of filtering out dishonest feedbacks when computing reputation-based trust of a node, including the feedbacks filed by malicious nodes through collusion. Our experiments show that, comparing with existing reputation systems, our framework is highly dependable and effective in countering malicious nodes regarding strategic oscillating behavior, flooding malevolent feedbacks with fake transactions, and dishonest feedbacks.

REFERENCES

• 1: Karl Aberer , Zoran Despotovic, Managing trust in a peer-2-peer information system, Proceedings of the tenth international conference on Information and knowledge management, October 05-10, 2001, Atlanta, Georgia, USA [doi>10.1145/502585.502638]
• 2: Miguel Castro , Peter Druschel , Ayalvadi Ganesh , Antony Rowstron , Dan S. Wallach, Secure routing for structured peer-to-peer overlay networks, Proceedings of the 5th symposium on Operating systems design and implementation

  Due to copyright restrictions we are not able to make the PDFs for this conference available for downloading

  , December 09-11, 2002, Boston, Massachusetts [doi>10.1145/1060289.1060317]
• 3: Fabrizio Cornelli , Ernesto Damiani , Sabrina De Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati, Choosing reputable servents in a P2P network, Proceedings of the 11th international conference on World Wide Web, May 07-11, 2002, Honolulu, Hawaii, USA [doi>10.1145/511446.511496]
• 4: Ernesto Damiani , De Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati , Fabio Violante, A reputation-based approach for choosing reliable resources in peer-to-peer networks, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA [doi>10.1145/586110.586138]
• 5: Chrysanthos Dellarocas, The Digitization of Word of Mouth: Promise and Challenges of Online Feedback Mechanisms, Management Science, v.49 n.10, p.1407-1424, October 2003 [doi>10.1287/mnsc.49.10.1407.17308]
• 6: C. Dellarocas. Sanctioning reputation mechanisms in online trading environments with moral hazard. In MIT Sloan Working Paper No. 4297-03, 2004.
• 7: John R. Douceur, The Sybil Attack, Revised Papers from the First International Workshop on Peer-to-Peer Systems, p.251-260, March 07-08, 2002
• 8: George S. Fishman, Discrete-event simulation, Springer-Verlag, London, 2001
• 9: R. Guha , Ravi Kumar , Prabhakar Raghavan , Andrew Tomkins, Propagation of trust and distrust, Proceedings of the 13th international conference on World Wide Web, May 17-20, 2004, New York, NY, USA [doi>10.1145/988672.988727]
• 10: Holger Vogt , Henning Pagnia , Felix C. Gärtner, Modular Fair Exchange Protocols for Electronic Commerce, Proceedings of the 15th Annual Computer Security Applications Conference, p.3, December 06-10, 1999
• 11: Sepandar D. Kamvar , Mario T. Schlosser , Hector Garcia-Molina, The Eigentrust algorithm for reputation management in P2P networks, Proceedings of the 12th international conference on World Wide Web, May 20-24, 2003, Budapest, Hungary [doi>10.1145/775152.775242]
• 12: Shyong K. Lam , John Riedl, Shilling recommender systems for fun and profit, Proceedings of the 13th international conference on World Wide Web, May 17-20, 2004, New York, NY, USA [doi>10.1145/988672.988726]
• 13: Silvio Micali, Simple and fast optimistic protocols for fair electronic exchange, Proceedings of the twenty-second annual symposium on Principles of distributed computing, p.12-19, July 13-16, 2003, Boston, Massachusetts [doi>10.1145/872035.872038]
• 14: Hitay Ozbay, Introduction to Feedback Control Theory, CRC Press, Inc., Boca Raton, FL, 1999
• 15: L. Page, S. Brin, R. Motwani, and T. Winograd. The pagerank citation ranking: Bringing order to the web. Technical report, 1998.
• 16: Indrajit Ray , Indrakshi Ray, Fair exchange in E-commerce, ACM SIGecom Exchanges, v.3 n.2, p.9-17, Spring, 2002 [doi>10.1145/844340.844345]
• 17: M. Richardson, R. Agarwal, and P. Domingos. Trust management for the semantic web. In Proceedings of International Semantic Web Conference, 2003.
• 18: Mudhakar Srivatsa , Ling Liu, Vulnerabilities and Security Threats in Structured Overlay Networks: A Quantitative Analysis, Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC'04), p.252-261, December 06-10, 2004 [doi>10.1109/CSAC.2004.50]
• 19: Li Xiong , Ling Liu, A reputation-based trust model for peer-to-peer ecommerce communities [Extended Abstract], Proceedings of the 4th ACM conference on Electronic commerce, June 09-12, 2003, San Diego, CA, USA [doi>10.1145/779928.779972]
• 20: Bin Yu , Munindar P. Singh, A Social Mechanism of Reputation Management in Electronic Communities, Proceedings of the 4th International Workshop on Cooperative Information Agents IV, The Future of Information Agents in Cyberspace, p.154-165, July 07-09, 2000

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems
          Subjects: Distributed applications

Additional Classification:
  C. Computer Systems Organization
  C.4 PERFORMANCE OF SYSTEMS
      Subjects: Reliability, availability, and serviceability

General Terms:
Performance, Reliability, Security