2005-Tailored trustworthiness estimations in peer-to-peer networks

  • 格式:pdf
  • 大小:228.85 KB
  • 文档页数:6

TailoredTrustworthinessEstimationsin

Peer-to-PeerNetworks

KatriYlitalo

HelsinkiInstituteforInformationTechnology

P.O.Box9800,02150HUT,Finland

Email:katri.ylitalo@hiit.fiSilkeHoltmanns

NokiaResearchCenter

P.O.Box407,00045NokiaGroup,Finland

Email:silke.holtmanns@nokia.com

Abstract—Inpeer-to-peer(P2P)communities,usersmakeper-sonaltrustevaluationsofeachotherbasedontheirexperiencesandobservations.Theavailableinformationofthepeer’spastbehavior,i.e.reputation,isoftenincomplete,thecredibilityofevaluationsisaconcernandtherelevanceoftheavailableinformationvaries.Inthispaper,weproposefunctionsforproducingtailoredtrustworthinessestimationsinP2Pcommunitiesbasedonthepeerspastbehavior.ThepresentedmechanismprovidessomeflexibilityonapplyingitindifferentkindsofP2Pnetworks.

I.INTRODUCTION

Inonlinecommunities,agroupofusersinteractswitheach

otherbydigitalmeansandhaveamutualareaofinterest.

Usersmakepersonaltrustevaluationsofeachotherbasedon

theirexperiencesandobservations.Anexampleofthistype

ofacommunityiseBay,whichhasacentralizedevaluation

mechanismformanagingtheinformationabouttheusers’past

behavior,i.e.reputation.Thisreputationinformationismeant

toassisttheusersintheirpersonaltrustdecisions.

Someonlinecommunitiesarebasedonpeer-to-peer(P2P)

networks,suchasfilesharingandfreeprogrammingcom-

munities.Intheseinteractionenvironments,i.e.contexts,the

actualinteractionshappendirectlybetweentheusers,i.e.peers

-insteadofacentralizedtrustedthirdpartybeingincontrol.

Characteristically,inaP2Papproachthepeerscontributethe

systeminsomemeans.Forinstance,theyprovidestorage

capacitytothecommunity.

Typically,anonlinecommunityhasacentralizedreputation

systemwithonefixedmechanismprocessingtheinformation

andrepresentingtheusers’trustworthiness.Thesesystems

usuallyhaveacentralizedstoragesystemthatcontainsdetailed

transactiondata,evaluationsandotherpersonaldataofthe

users.However,thiskindofanapproachdoesnottakeinto

accounttheusers’personalpreferences,notforgettingthat

thelargecentralizedstoragesystemsaretemptingtargetsof

attackstothedata.

DistributingthereputationmanagementintotheP2Pnet-

workchangesthesituationinsomewhat.Processinglocally

thereputationinformationenablestailoringthetrustworthi-

nessestimationstomeettheuser’spersonalpreferences.The

reputationmanagementmechanismcanbepersonalisedby

givingweightstotransactionsthatareconsideredimportant

totheuser’scurrentsituation.Nevertheless,distributingthereputationmanagementwithoutatrustedthirdpartyalso

produceschallengesformanagingtheinformation.Thesystem

hastotakeintoaccountthatnotallreputationinformationis

available,itscredibilityisaconcerninadditiontothatspoofed

transactionsandephemeralidentitiesarepossible.

Inthispaper,weexaminehowtolocallyproduceatai-

loredtrustworthinessestimationofauserfromtheavailable

reputationinformationinaP2Pnetwork.Themainobjective

istodefineafinegrainedandcontextdependentreputation

evaluationmechanismthatisgenericforP2Papplicationsand

presentgenericfunctionsthatmaybeinstantiatedindifferent

problemareas.Toachievethisgoal,themechanismfocuses

oncapturingandprocessingtheinformationthatislinkedto

theconductedtransactionsonauserlevelapplication.

II.RELATEDWORK

Alargepartoftheavailabledistributedreputationmanage-

mentmechanismsfocusonreliabilityinroutingandmessage

forwarding[4].S.MoloneyandP.Ginzboorg[12]arguethat,

inprinciple,theideaofusingthepastbehaviorofapeerin

trustworthinessestimationsmapswelltopervasivenetworks

utilizingshort-rangewirelesstechnologies.Supportingthis,

S.Moloney[11]alsopresentssimulationofdistributed

recommendationsystem.

Typically,mechanismsthatcaptureandprocessusers’eval-

uationsaretechnologyandsecurityorientedsuchasthe

privacy-enhancedP2PreputationsystemthatM.Kinateder

andS.Pearson[9]propose.Despitetheslightlydifferent

approaches,themechanismwepresentfitspartlyintothe

propositionofarchitectureandalgorithmsforadistributed

reputationsystembyM.KinatederandK.Rothermel[8].

Thepresentedideaofweightsinthedifferentcategoriesofthe

contentinacontextsupportsourapproachinevaluatingsimi-

larityofthecontentintheconductedtransaction.Additionally,

weconsiderimportanttobeabletoevaluatetheexpertiseof

thoseprovidingtheevaluations.

Comparedtotheamountofworkdoneinthedistributed

reputationmanagement,relativelyfewfunctions,e.g.Liuetal.

[10],andnotesformechanismimplementationapplicableto

differentcontextsareproposed.Partoftheresearchproposing

thefunctionsarerelatedtoprotocolsforexchangingthetrust

decisionrelatedinformationsuchas,e.g.,Abereretal.[2]

andSelcuketal.[18].Someoftheearlierworkspropose

0-7803-9469-0/05/$20.00 ©2005 IEEE