Abstract

Abstract. Peer-to-peer (p2p) networking technologies have gained popularity as a mechanism for users to share files without the need for centralized servers. A p2p network provides a scalable and fault-tolerant mechanism to locate nodes anywhere on a network without maintaining a large amount of routing state. This allows for a variety of applications beyond simple file sharing. Examples include multicast systems, anonymous communications systems, and web caches. We survey security issues that occur in the underlying p2p routing protocols, as well as fairness and trust issues that occur in file sharing and other p2p applications. We discuss how techniques, ranging from cryptography, to random network probing, to economic incentives, can be used to address these problems. 1

Citations

3261	Chord: A scalable peer-to-peer lookup service for internet applications - Stoica, Morris, et al. - 2001
2550	A scalable content-addressable network - Ratnasamy, Francis, et al. - 2001
1606	Pastry: Scalable, distributed object location and routing for large-scale peer-to-peer systems - Rowstron, Druschel - 2001
1043	The Sybil attack - Douceur - 2002
824	Widearea cooperative storage with CFS - Dabek, Kaashoek, et al. - 2001
644	Storage management and caching in past, a large-scale, persistent peer-to-peer storage utility - Rowstron, Druschel
523	Practical Byzantine Fault Tolerance - Castro, Liskov - 1999
478	SCRIBE: A large-scale and decentralized application-level multicast infrastructure - Castro, Druschel, et al. - 2002
337	Topology-aware routing in structured peer-topeer overlay networks - Castro, Druschel, et al. - 2002
292	Tarzan: a peer-to-peer anonymizing network layer - Freedman, Morris - 2002
275	Scribe: The design of a large-scale event notification infrastructure. Submitted for publication - Rowstron, Kermarrec, et al. - 2001
274	Feasibility of a Serverless Distributed file System Deployed on an Existing Set of Desktop PCs - Bolosky, Douceur, et al. - 2000
250	An Analysis of Internet Content Delivery Systems - Saroiu, Gummadi, et al. - 2002
249	Anonymous Connections and Onion Routing - Reed, Syverson, et al. - 1998
230	Distributed algorithmic mechanism design: Recent results and future directions - Feigenbaum, Shenker - 2002
196	Tapestry: an infrastructure for fault-resilient wide-area location and routing - Zhao, Kubiatowicz, et al. - 2001
193	Separating key management from file system security - Mazières, Kaminsky, et al. - 1999
191	Publius: A robust, tamper-evident, censorshipresistant, web publishing system - Waldman, Rubin, et al. - 2000
183	Extensible security architectures for Java - Wallach, Balfanz, et al. - 1997
156	Security Considerations for Peer-to-Peer Distributed Hash Tables - Sit, Morris - 2002
152	Plan: A packet language for active networks - Hicks, Kakkar, et al. - 1998
132	Secure Communications Over Insecure Channels - Merkle - 1978
91	Anonymous Web transactions with Crowds - Reiter, Rubin - 1999
69	Tangler: A censorship-resistant publishing system based on document entanglements - Waldman, Mazières - 2001
32	Anonymizing censorship resistant systems - Serjantov - 2002
28	Achord: A variant of the Chord lookup service for use in censorship resistant peerto-peer publishing systems - Hazel, Wiley - 2002
25	Altruistic punishment in humans. Nature - Fehr, Gachter - 2002
25	Security aspects of Napster and Gnutella - Bellovin - 2001
9	Accountability measures for peer-to-peer systems - Dingledine, Freedman, et al. - 2000
3	Active network vision and reality: lessons from a capsule-based system - Weatherall - 1999
2	B.: New software quietly diverts sales commissions - Schwartz, Tedeschi - 2002
1	KaZaA sneakware stirs inside PCs - Spring - 2002