Ismail, Hatem (2018)
Analyzing and Mitigating Security Threats in P2P Systems.
Technische Universität Darmstadt
Dissertation, Erstveröffentlichung

Kurzbeschreibung (Abstract)

Peer-to-Peer (P2P) protocols increasingly underlie a growing diversity of net- worked applications (e.g., file sharing, streaming multimedia, storage, VoIP) especially as the decentralized P2P paradigm inherently fosters scalability and robustness. The growing application-oriented services also result in the evolu- tion of P2P systems spanning diverse data dissemination techniques, peer roles and topological structures. On the flip side, while decentralization and scalability are attractive, and common for all P2P systems, these design features also increase the P2P network’s exposure to a variety of security threats that can result in the degradation of services. In this thesis, we illustrate a set of important P2P attack types and subsequently develop approaches to secure P2P networks from these progressive and evolving attacks. Covering a comprehensive progression of P2P systems of increasing complexity (i.e., structured, unstructured and streaming), we evaluate the corresponding feasibility of conducting attacks and the resultant impact onto them. Subsequently, we investigate the progressive steps of detection, mitigation and sanitization potential to restore the requisite P2P functionality. Depending on the targeted P2P network model, we propose countermeasures that (a) are effective against a specific attack type and its possible variants, (b) are light-weight in execution, (c) are fully decentralized, i.e., do not depend on central entities, and (d) allow for both reactive and proactive mitigation. Our theoretical analysis and simulations demonstrate that our proposed attack detection/mitigation mechanisms can reach up to 90-100% detection accu- racy while inducing low overhead of 5-10% even when operating under severe attack scenarios.

Frage zum Eintrag

Redaktionelle Details anzeigen