2005-Tailored trustworthiness estimations in peer-to-peer networks
- 格式:pdf
- 大小:228.85 KB
- 文档页数:6
TailoredTrustworthinessEstimationsin
Peer-to-PeerNetworks
KatriYlitalo
HelsinkiInstituteforInformationTechnology
P.O.Box9800,02150HUT,Finland
Email:katri.ylitalo@hiit.fiSilkeHoltmanns
NokiaResearchCenter
P.O.Box407,00045NokiaGroup,Finland
Email:silke.holtmanns@nokia.com
Abstract—Inpeer-to-peer(P2P)communities,usersmakeper-sonaltrustevaluationsofeachotherbasedontheirexperiencesandobservations.Theavailableinformationofthepeer’spastbehavior,i.e.reputation,isoftenincomplete,thecredibilityofevaluationsisaconcernandtherelevanceoftheavailableinformationvaries.Inthispaper,weproposefunctionsforproducingtailoredtrustworthinessestimationsinP2Pcommunitiesbasedonthepeerspastbehavior.ThepresentedmechanismprovidessomeflexibilityonapplyingitindifferentkindsofP2Pnetworks.
I.INTRODUCTION
Inonlinecommunities,agroupofusersinteractswitheach
otherbydigitalmeansandhaveamutualareaofinterest.
Usersmakepersonaltrustevaluationsofeachotherbasedon
theirexperiencesandobservations.Anexampleofthistype
ofacommunityiseBay,whichhasacentralizedevaluation
mechanismformanagingtheinformationabouttheusers’past
behavior,i.e.reputation.Thisreputationinformationismeant
toassisttheusersintheirpersonaltrustdecisions.
Someonlinecommunitiesarebasedonpeer-to-peer(P2P)
networks,suchasfilesharingandfreeprogrammingcom-
munities.Intheseinteractionenvironments,i.e.contexts,the
actualinteractionshappendirectlybetweentheusers,i.e.peers
-insteadofacentralizedtrustedthirdpartybeingincontrol.
Characteristically,inaP2Papproachthepeerscontributethe
systeminsomemeans.Forinstance,theyprovidestorage
capacitytothecommunity.
Typically,anonlinecommunityhasacentralizedreputation
systemwithonefixedmechanismprocessingtheinformation
andrepresentingtheusers’trustworthiness.Thesesystems
usuallyhaveacentralizedstoragesystemthatcontainsdetailed
transactiondata,evaluationsandotherpersonaldataofthe
users.However,thiskindofanapproachdoesnottakeinto
accounttheusers’personalpreferences,notforgettingthat
thelargecentralizedstoragesystemsaretemptingtargetsof
attackstothedata.
DistributingthereputationmanagementintotheP2Pnet-
workchangesthesituationinsomewhat.Processinglocally
thereputationinformationenablestailoringthetrustworthi-
nessestimationstomeettheuser’spersonalpreferences.The
reputationmanagementmechanismcanbepersonalisedby
givingweightstotransactionsthatareconsideredimportant
totheuser’scurrentsituation.Nevertheless,distributingthereputationmanagementwithoutatrustedthirdpartyalso
produceschallengesformanagingtheinformation.Thesystem
hastotakeintoaccountthatnotallreputationinformationis
available,itscredibilityisaconcerninadditiontothatspoofed
transactionsandephemeralidentitiesarepossible.
Inthispaper,weexaminehowtolocallyproduceatai-
loredtrustworthinessestimationofauserfromtheavailable
reputationinformationinaP2Pnetwork.Themainobjective
istodefineafinegrainedandcontextdependentreputation
evaluationmechanismthatisgenericforP2Papplicationsand
presentgenericfunctionsthatmaybeinstantiatedindifferent
problemareas.Toachievethisgoal,themechanismfocuses
oncapturingandprocessingtheinformationthatislinkedto
theconductedtransactionsonauserlevelapplication.
II.RELATEDWORK
Alargepartoftheavailabledistributedreputationmanage-
mentmechanismsfocusonreliabilityinroutingandmessage
forwarding[4].S.MoloneyandP.Ginzboorg[12]arguethat,
inprinciple,theideaofusingthepastbehaviorofapeerin
trustworthinessestimationsmapswelltopervasivenetworks
utilizingshort-rangewirelesstechnologies.Supportingthis,
S.Moloney[11]alsopresentssimulationofdistributed
recommendationsystem.
Typically,mechanismsthatcaptureandprocessusers’eval-
uationsaretechnologyandsecurityorientedsuchasthe
privacy-enhancedP2PreputationsystemthatM.Kinateder
andS.Pearson[9]propose.Despitetheslightlydifferent
approaches,themechanismwepresentfitspartlyintothe
propositionofarchitectureandalgorithmsforadistributed
reputationsystembyM.KinatederandK.Rothermel[8].
Thepresentedideaofweightsinthedifferentcategoriesofthe
contentinacontextsupportsourapproachinevaluatingsimi-
larityofthecontentintheconductedtransaction.Additionally,
weconsiderimportanttobeabletoevaluatetheexpertiseof
thoseprovidingtheevaluations.
Comparedtotheamountofworkdoneinthedistributed
reputationmanagement,relativelyfewfunctions,e.g.Liuetal.
[10],andnotesformechanismimplementationapplicableto
differentcontextsareproposed.Partoftheresearchproposing
thefunctionsarerelatedtoprotocolsforexchangingthetrust
decisionrelatedinformationsuchas,e.g.,Abereretal.[2]
andSelcuketal.[18].Someoftheearlierworkspropose
0-7803-9469-0/05/$20.00 ©2005 IEEE