Architecting trust-enabled peer-to-peer file-sharing applications

ABSTRACT

Decentralized peer-to-peer (P2P) resource sharing applications lack a centralized authority that can facilitate peer and resource look-ups and coordinate resource sharing between peers. Instead, peers directly interact and exchange resources with other peers. These systems are often open and do not regulate the entry of peers into the system. Thus, there can be malicious peers in the system who threaten others by offering Trojan horses and viruses disguised as seemingly innocent resources. Several trust-based solutions exist to address such threats; unfortunately there is a lack of design guidance on how these solutions can be integrated into a resource sharing application. In this paper, we describe how two teams of undergraduate students separately integrated XREP, a third-party reputation-based protocol for file-sharing applications, with PACE, our software architecture-based approach for decentralized trust management. This was done in order to construct trust-enabled P2P file-sharing application prototypes. Our observations have revealed that using an architecture-based approach in incorporating trust into P2P resource-sharing applications is not only feasible, but also significantly beneficial. Our efforts also demonstrate both the ease of adoption and ease of use of the PACE-based approach in constructing such trust-enabled decentralized applications.

REFERENCES

• 1: 1 Napster. URL: http://www.napster.com/
• 2: 2 Gnutella. URL: http://www.gnutella.com/
• 3: 3 Zetter, K. Kazaa Delivers More than Tunes. 2004.
• 4: 4 Kazaa. URL: http://www.kazaa.com/
• 5: Ernesto Damiani , De Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati , Fabio Violante, A reputation-based approach for choosing reliable resources in peer-to-peer networks, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA [doi>10.1145/586110.586138]
• 6: PACE: An Architectural Style for Trust Management in Decentralized Applications, Proceedings of the Fourth Working IEEE/IFIP Conference on Software Architecture (WICSA'04), p.221, June 12-15, 2004
• 7: Matt Blaze , Joan Feigenbaum , Jack Lacy, Decentralized Trust Management, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.164, May 06-08, 1996
• 8: 8 Grandison, T. and Sloman, M. A Survey of Trust in Internet Applications. IEEE Communications Surveys & Tutorials, 3, 4 (2000), 2-16.
• 9: 9 Blaze, M. and Feigenbaum, J. Managing Trust in an Information Labeling System. European Transactions on the Telecommunications, 8 (1997), 491-501.
• 10: Yang-Hua Chu , Joan Feigenbaum , Brian LaMacchia , Paul Resnick , Martin Strauss, Referee: trust management for Web applications, World Wide Web Journal, v.2 n.3, p.127-139, Summer 1997
• 11: Paul Resnick , Ko Kuwabara , Richard Zeckhauser , Eric Friedman, Reputation systems, Communications of the ACM, v.43 n.12, p.45-48, Dec. 2000 [doi>10.1145/355112.355122]
• 12: Alfarez Abdul-Rahman , Stephen Hailes, A distributed trust model, Proceedings of the 1997 workshop on New security paradigms, p.48-60, September 23-26, 1997, Langdale, Cumbria, United Kingdom [doi>10.1145/283699.283739]
• 13: 13 eBay. URL: http://www.ebay.com/
• 14: 14 Amazon. URL: http://www.amazon.com/
• 15: 15 Langley, A. Freenet, In Peer-to-Peer: Harnessing the Power of Disruptive Technologies, A. Oram, Editor. 2001, O'Reilly. pp. 123-132.
• 16: Zhengqiang Liang , Weisong Shi, PET: A PErsonalized Trust Model with Reputation and Risk Evaluation for P2P Resource Sharing, Proceedings of the Proceedings of the 38th Annual Hawaii International Conference on System Sciences (HICSS'05) - Track 7, p.201.2, January 03-06, 2005 [doi>10.1109/HICSS.2005.493]
• 17: PeerTrust: Supporting Reputation-Based Trust for Peer-to-Peer Electronic Communities, IEEE Transactions on Knowledge and Data Engineering, v.16 n.7, p.843-857, July 2004 [doi>10.1109/TKDE.2004.1318566]
• 18: Sepandar D. Kamvar , Mario T. Schlosser , Hector Garcia-Molina, The Eigentrust algorithm for reputation management in P2P networks, Proceedings of the 12th international conference on World Wide Web, May 20-24, 2003, Budapest, Hungary [doi>10.1145/775152.775242]
• 19: Makoto Iguchi , Masayuki Terada , Ko Fujimura, Managing Resource and Servent Reputation in P2P Networks, Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 7, p.70200.2, January 05-08, 2004
• 20: Shalendra Chhabra , Ernesto Damiani , Sabrina De Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati, A Protocol for Reputation Management in Super-Peer Networks, Proceedings of the Database and Expert Systems Applications, 15th International Workshop on (DEXA'04), p.979-983, August 30-September 03, 2004 [doi>10.1109/DEXA.2004.22]
• 21: Richard N. Taylor , Nenad Medvidovic , Kenneth M. Anderson , E. James Whitehead, Jr. , Jason E. Robbins , Kari A. Nies , Peyman Oreizy , Deborah L. Dubrow, A Component- and Message-Based Architectural Style for GUI Software, IEEE Transactions on Software Engineering, v.22 n.6, p.390-406, June 1996 [doi>10.1109/32.508313]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.2 Network Protocols
          Subjects: Applications (SMTP, FTP, etc.)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems
          Subjects: Distributed applications

  D. Software
  D.2 SOFTWARE ENGINEERING
        D.2.11 Software Architectures
            Subjects: Domain-specific architectures
  D.4 OPERATING SYSTEMS
      D.4.7 Organization and Design
          Subjects: Distributed systems

General Terms:
Design, Management