[PDF][PDF] Induced Churn as Shelter from Routing-Table Poisoning.

T Condie, V Kacholia, S Sank, JM Hellerstein…�- NDSS, 2006 - Citeseer
T Condie, V Kacholia, S Sank, JM Hellerstein, P Maniatis
NDSS, 2006Citeseer
Structured overlays are an important and powerful class of overlay networks that has
emerged in recent years. They are typically targeted at peer-to-peer deployments involving
millions of user-managed machines on the Internet. In this paper we address routing-table
poisoning attacks against structured overlays, in which adversaries attempt to intercept traffic
and control the system by convincing other nodes to use compromised nodes as their
overlay network neighbors. In keeping with the fully-decentralized goals of structured�…
Abstract
Structured overlays are an important and powerful class of overlay networks that has emerged in recent years. They are typically targeted at peer-to-peer deployments involving millions of user-managed machines on the Internet. In this paper we address routing-table poisoning attacks against structured overlays, in which adversaries attempt to intercept traffic and control the system by convincing other nodes to use compromised nodes as their overlay network neighbors. In keeping with the fully-decentralized goals of structured overlay design, we propose a defense mechanism that makes minimal use of centralized infrastructure. Our approach, induced churn, utilizes periodic routing-table resets, unpredictable identifier changes, and a rate limit on routing-table updates. Induced churn leaves adversaries at the mercy of chance: they have little opportunity to strategize their positions in the overlay, and cannot entrench themselves in any position that they do acquire. We implement induced churn in Maelstrom, an extension to the broadly used Bamboo distributed hash table. Our Maelstrom experiments over a simulated network demonstrate robust routing with very modest costs in bandwidth and latency, at levels of adversarial activity where unprotected overlays are rendered almost completely useless1.
Citeseer
Showing the best result for this search. See all results