Detection and mitigation of localized attacks in a widely deployed P2P network - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Article Dans Une Revue Peer-to-Peer Networking and Applications Année : 2012

Detection and mitigation of localized attacks in a widely deployed P2P network

Thibault Cholez
Isabelle Chrisment
Guillaume Doyen
  • Fonction : Auteur
  • PersonId : 868503

Résumé

Several large scale P2P networks operating on the Internet are based on a Distributed Hash Table. These networks offer valuable services, but they all suffer from a critical issue allowing malicious nodes to be inserted in specific places on the DHT for undesirable purposes (monitoring, distributed denial of service, pollution, etc.). While several attacks and attack scenarios have been documented, few studies have measured the actual deployment of such attacks and none of the documented countermeasures have been tested for compatibility with an already deployed network. In this article, we focus on the KAD network. Based on large scale monitoring campaigns, we show that the world-wide deployed KAD network suffers large number of suspicious insertions around shared contents and we quantify them. To cope with these peers, we propose a new efficient protection algorithm based on analyzing the distribution of the peers' ID found around an entry after a DHT lookup. We evaluate our solution and show that it detects the most efficient configurations of inserted peers with a very small false-negative rate, and that the countermeasures successfully filter almost all the suspicious peers. We demonstrate the direct applicability of our approach by implementing and testing our solution in real P2P networks.
Fichier principal
Vignette du fichier
detection_mitigation_sybil_attacks.pdf (605.96 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00786438 , version 1 (08-02-2013)

Identifiants

Citer

Thibault Cholez, Isabelle Chrisment, Olivier Festor, Guillaume Doyen. Detection and mitigation of localized attacks in a widely deployed P2P network. Peer-to-Peer Networking and Applications, 2012, Special Issue on Experimental Evaluation of Peer-to-Peer Applications, 6 (2), pp.155-174. ⟨10.1007/s12083-012-0137-7⟩. ⟨hal-00786438⟩
348 Consultations
406 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More