Abstract

Abstract. Peer-to-peer (p2p) networking technologies have gained popularity as a mechanism for users to share files without the need for centralized servers. A p2p network provides a scalable and fault-tolerant mechanism to locate nodes anywhere on a network without maintaining a large amount of routing state. This allows for a variety of applications beyond simple file sharing. Examples include multicast systems, anonymous communications systems, and web caches. We survey security issues that occur in the underlying p2p routing protocols, as well as fairness and trust issues that occur in file sharing and other p2p applications. We discuss how techniques, ranging from cryptography, to random network probing, to economic incentives, can be used to address these problems. 1

Citations

3445	Chord: A scalable peer-to-peer lookup service for internet applications - Stoica, Morris, et al. - 2001
2677	A scalable content-addressable network - Ratnasamy, Francis, et al. - 2001
1692	Pastry: Scalable, distributed object location and routing for large-scale peer-to-peer systems - Rowstron, Druschel - 2001
1121	The sybil attack - Douceur - 2002
843	Wide-Area cooperative storage with CFS - DABEK, KAASHOEK, et al. - 2001
664	Storage management and caching in PAST, a large-scale, persistent peer-to-peer storage utility - ROWSTRON, P
543	Practical Byzantine fault tolerance - Castro, Liskov - 1999
499	SCRIBE: A large-scale and decentralized application-level multicast infrastructure,” JSAC - Castro, Druschel, et al. - 2002
358	Topology-aware routing in structured peer-to-peer overlay networks - Castro, Druschel, et al. - 2002
301	Tarzan: a Peer-to-Peer Anonymizing Network Layer - Freedman, Morris - 2002
286	Scribe: The design of a largescale event notification infrastructure - Rowstron, Kermarrec, et al. - 2001
279	Feasibility of a serverless distributed file system deployed on an existing set of desktop pcs - Bolosky, Douceur, et al.
262	An analysis of Internet content delivery systems - Saroiu, Gummadi, et al.
260	Anonymous connections and onion routing - Reed, Syverson, et al. - 1998
239	Distributed algorithmic mechanism design: Recent results and future directions - Feigenbaum, Shenker - 2002
203	Tapestry: An infrastructure for fault-resilient widearea location and routing - Zhao, Kubiatowicz, et al. - 2001
201	Separating key management from file system security - Mazieres, Kaminsky, et al. - 1999
195	Publius: A robust, tamper-evident, censorship-resistant, web publishing system - Waldman, AD, et al. - 2000
186	Extensible security architectures for Java - Wallach, Balfanz, et al. - 1997
166	Security considerations for peer-to-peer distributed hash tables - SIT, MORRIS - 2002
156	PLAN: A packet language for active networks - Hicks, Kakkar, et al. - 1998
133	Secure Communications over Insecure Channels - Merkle - 1978
92	Anonymous Web Transactions with Crowds - Reiter, Rubin - 1999
71	Tangler: a censorship-resistant publishing system based on document entanglements - Waldman, Mazieres - 2001
35	Altruistic punishment in humans, Nature - Fehr, Gächter - 2002
35	Anonymizing censorship resistant systems - Serjantov - 2002
28	Achord: A variant of the chord lookup service for use in censorhip resistant peer-to-peer publishing systems - Hazel, Wiley - 2002
25	Security aspects of Napster and Gnutella - Bellovin - 2001
9	Accountability Measures for Peerto-Peer Systems - Dingledine, Freedman, et al. - 2000
3	Active network vision and reality: lessons from a capsule-based system - Weatherall - 1999
2	B.: New software quietly diverts sales commissions - Schwartz, Tedeschi - 2002
1	KaZaA sneakware stirs inside PCs - Spring - 2002