Take a look at the new version of this page: [ beta version ]. Tell us what you think.

ABSTRACT

Peer-to-peer (P2P) applications have seen an enormous success, and recently introduced P2P services have reached tens of millions of users. A feature that significantly contributes to the success of many P2P applications is user anonymity. However, anonymity opens the door to possible misuses and abuses, exploiting the P2P network as a way to spread tampered with resources, including Trojan Horses, viruses, and spam. To address this problem we propose a self-regulating system where the P2P network is used to implement a robust reputation mechanism. Reputation sharing is realized through a distributed polling algorithm by which resource requestors can assess the reliability of a resource offered by a participant before initiating the download. This way, spreading of malicious contents will be reduced and eventually blocked. Our approach can be straightforwardly piggybacked on existing P2P protocols and requires modest modifications to current implementations.

REFERENCES

• 1: Alfarez Abdul-Rahman , Stephen Hailes, Supporting Trust in Virtual Communities, Proceedings of the 33rd Hawaii International Conference on System Sciences-Volume 6, p.6007, January 04-07, 2000
• 2: Karl Aberer , Zoran Despotovic, Managing trust in a peer-2-peer information system, Proceedings of the tenth international conference on Information and knowledge management, October 05-10, 2001, Atlanta, Georgia, USA [doi>10.1145/502585.502638]
• 3: E. Adar and B. Huberman. Free riding on gnutella. Technical report, Xerox PARC, August 2000.
• 4: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 5: Matt Blaze , Joan Feigenbaum , John Ioannidis , Angelos D. Keromytis, The role of trust management in distributed systems security, Secure Internet programming: security issues for mobile and distributed objects, Springer-Verlag, London, 2001
• 6: Piero Bonatti , Pierangela Samarati, Regulating service access and information release on the Web, Proceedings of the 7th ACM conference on Computer and communications security, p.134-143, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352620]
• 7: R. Chen and W. Yeager. Poblano - a distributed trust model for peer-to-peer networks. JXTA Security Project White Paper, 2001.
• 8: Fabrizio Cornelli , Ernesto Damiani , Sabrina De Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati, Choosing reputable servents in a P2P network, Proceedings of the 11th international conference on World Wide Web, May 07-11, 2002, Honolulu, Hawaii, USA [doi>10.1145/511446.511496]
• 9: Chrysanthos Dellarocas, Immunizing online reputation reporting systems against unfair ratings and discriminatory behavior, Proceedings of the 2nd ACM conference on Electronic commerce, p.150-157, October 17-20, 2000, Minneapolis, Minnesota, United States [doi>10.1145/352871.352889]
• 10: Roger Dingledine , Michael J. Freedman , David Molnar, The free haven project: distributed anonymous storage service, International workshop on Designing privacy enhancing technologies: design issues in anonymity and unobservability, p.67-95, January 2001, Berkeley, California, United States
• 11: V. Doshi , A. Fayad , S. Jajodia , R. MacLean, Using attribute certificates with mobile policies in electronic commerce applications, Proceedings of the 16th Annual Computer Security Applications Conference, p.298, December 11-15, 2000
• 12: C. Ellison. SPKI certificate documentation. http://www.pobox.com/~/html/spki.html.
• 13: E.J. Friedman and P. Resnick. The social cost of cheap pseudonyms. Journal of Economics and Management Strategy, 10(2):173--199, Summer 2001.
• 14: B. Gladman, C. Ellison, and N. Bohm. Digital signatures, certificates and electronic commerce. http://citeseer.nj.nec.com/277887.html.
• 15: Bill Horne , Benny Pinkas , Tomas Sander, Escrow services and incentives in peer-to-peer networks, Proceedings of the 3rd ACM conference on Electronic Commerce, p.85-94, October 14-17, 2001, Tampa, Florida, USA [doi>10.1145/501158.501168]
• 16: KaZaA. http://www.kazaa.com.
• 17: Andrew Oram , Andy Oram, Peer-to-Peer: Harnessing the Power of Disruptive Technologies, O'Reilly & Associates, Inc., Sebastopol, CA, 2001
• 18: Paul Resnick , Ko Kuwabara , Richard Zeckhauser , Eric Friedman, Reputation systems, Communications of the ACM, v.43 n.12, p.45-48, Dec. 2000 [doi>10.1145/355112.355122]
• 19: S. Saroiu, P.K. Gummadi, and S.D. Gribble. A measurement study of peer-to-peer file sharing systems. In Proc. of Multimedia Computing and Networking (MMCN), San Jose, CA, USA, January 2002.
• 20: J. Ben Schafer , Joseph A. Konstan , John Riedl, E-Commerce Recommendation Applications, Data Mining and Knowledge Discovery, v.5 n.1-2, p.115-153, January-April 2001 [doi>10.1023/A:1009804230409]
• 21: The Gnutella Protocol Specification v0.4 (Document Revision 1.2), June 2001. http://www9.limewire.com/developer/gnutella_protocol_0.4.pdf.
• 22: Bin Yu , Munindar P. Singh, A Social Mechanism of Reputation Management in Electronic Communities, Proceedings of the 4th International Workshop on Cooperative Information Agents IV, The Future of Information Agents in Cyberspace, p.154-165, July 07-09, 2000
• 23: Ting Yu , Marianne Winslett , Kent E. Seamons, Interoperable strategies in automated trust negotiation, Proceedings of the 8th ACM conference on Computer and Communications Security, November 05-08, 2001, Philadelphia, PA, USA [doi>10.1145/501983.502004]
• 24: Giorgos Zacharia , Alexandros Moukas , Pattie Maes, Collaborative Reputation Mechanisms in Electronic Marketplaces, Proceedings of the Thirty-second Annual Hawaii International Conference on System Sciences-Volume 8, p.8026, January 05-08, 1999

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  H. Information Systems
  H.3 INFORMATION STORAGE AND RETRIEVAL
      H.3.5 On-line Information Services
          Subjects: Data sharing

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Invasive software (e.g., viruses, worms, Trojan horses)

General Terms:
Design, Security

Keywords:
peer-to-peer network, polling protocol, reputation-based systems