inria-00405381, version 2
Evaluation of Sybil Attacks Protection Schemes in KAD
Thibault Cholez
1Isabelle Chrisment 1Olivier Festor 1
3rd International Conference on Autonomous Infrastructure, Management and Security - AIMS 2009 5637 (2009) 70-82
Résumé : In this paper, we assess the protection mechanisms entered into recent clients to fight against the Sybil attack in KAD, a widely deployed Distributed Hash Table. We study three main mechanisms: a protection against flooding through packet tracking, an IP address limitation and a verification of identities. We evaluate their efficiency by designing and adapting an attack for several KAD clients with different levels of protection. Our results show that the new security rules mitigate the Sybil attacks previously launched. However, we prove that it is still possible to control a small part of the network despite the new inserted defenses with a distributed eclipse attack and limited resources.
- 1 : MADYNES (INRIA Lorraine - LORIA)
- INRIA – CNRS : UMR7503 – Université Henri Poincaré - Nancy I – Université Nancy II – Institut National Polytechnique de Lorraine (INPL)
- Domaine : Informatique/Réseaux et télécommunications
- Mots-clés : P2P networks – DHT – Sybil attack – security – KAD
- Commentaire : The original publication is available at www.springerlink.com
- Versions disponibles : v1 (20-07-2009) v2 (21-07-2009)
- inria-00405381, version 2
- http://hal.inria.fr/inria-00405381
- oai:hal.inria.fr:inria-00405381
- Contributeur : Thibault Cholez
- Soumis le : Mardi 21 Juillet 2009, 11:12:28
- Dernière modification le : Lundi 27 Juillet 2009, 16:27:43
Documents associés
Exporter