Taxonomy of attacks and defense mechanisms in P2P reputation systems—Lessons for reputation system designers

Koutrouli, Eleni; Tsalgatidou, Aphrodite

doi:10.1016/j.cosrev.2012.01.002

Cited by 58 publications

(40 citation statements)

References 56 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Secondly, false feedback filter is prerequisite to guarantee the correctness of feedback trust. At present, attacks against trust systems emerge endlessly in [15,16]; malicious entities may provide false interaction information about a target entity to the requestor. The existing models only identify and defend simple attacks and fraud but lack protection mechanisms against complex attacks such as collusion, spying, and strategic attacks, which leads to the poor security and robustness.…”

Section: Introductionmentioning

confidence: 99%

Modeling Dynamic Trust and Risk Evaluation Based on High-Order Moments

Gao

Dai

Liu

2015

Mathematical Problems in Engineering

View full text Add to dashboard Cite

This paper proposes a dynamic trust and risk evaluation model based on high-order moments. The credibility of an entity is measured with trust degree and risk value comprehensively. Firstly, considering the dynamic and time decay characters of trust, a time attenuation function is defined, and direct trust is further expressed. Subsequently, in order to improve the accuracy of feedback trust, a filter mechanism is constructed to eliminate the false feedback, combining coefficient of skewness with hypothesis test. More importantly, the weights of direct trust and feedback trust are derived subjectively and adaptively with the moments and frequency of direct interactions. Furthermore, risk is evaluated with direct risk and feedback risk, which are obtained by mainly using coefficient of variation and coefficient of kurtosis. Risk value can be used to measure the stability of providing services. Simulation results show that the proposed model not only has high accuracy, but also resists effectively collusive attacks and strategic malicious behaviors.

show abstract

Section: Introductionmentioning

confidence: 99%

Modeling Dynamic Trust and Risk Evaluation Based on High-Order Moments

Gao

Dai

Liu

2015

Mathematical Problems in Engineering

View full text Add to dashboard Cite

show abstract

“…Apart from the component repository described before, further important steps toward reusability were made by Hoffman et al [5] and Koutrouli and Tsalgatidou [8]. They conducted surveys on attacks and defense mechanisms and thus helped to collect the ideas for the research community.…”

Section: Research Gapmentioning

confidence: 99%

“…Because of the increasing attention paid to attacks against TRS, several security analyses were carried out in recent years [3,4,6,13]. The resulting proposals of attack taxonomies and formulations of challenges for robust TRS in turn motivated studies on defense strategies (for related surveys see [5] and [8]). As the various trust models are specifically designed to cope with certain attacks, they are not completely robust against various attacks in different settings.…”

Section: Attacks On Trust and Reputation Systemsmentioning

confidence: 99%

Reusable Defense Components for Online Reputation Systems

Sänger

Richthammer

Rösch

et al. 2015

Trust Management IX

View full text Add to dashboard Cite

Abstract. Attacks on trust and reputation systems (TRS) as well as defense strategies against certain attacks are the subject of many research papers. Although proposing valuable ideas, they all exhibit at least one of the following major shortcomings. Firstly, many researchers design defense mechanisms from scratch and without reusing approved ideas. Secondly, most proposals are limited to naming and theoretically describing the defense mechanisms. Another issue is the inconsistent denomination of attacks with similar characteristics among different researchers. To address these shortcomings, we propose a novel taxonomy of attacks on TRS focusing on their general characteristics and symptomatology. We use this taxonomy to assign reusable, clearly described and practically implemented components to different classes of attacks. With this work, we aim to provide a basis for TRS designers to experiment with numerous defense mechanisms and to build more robust systems in the end.

show abstract

“…To cope with the weaknesses of early reputation systems, a large body of work on the design of new trust models and robust metrics has been published (Artz and Gil 2007;Koutrouli and Tsalgatidou 2012;Sun and Liu 2012). While most early computation models could easily be manipulated by malicious actors, current models (particularly those introduced in literature) are quite resistant against a variety of attacks.…”

Section: Exploiting Reputation Systemsmentioning

confidence: 99%

“…In order to give a structured overview of weaknesses, Koutrouli and Tsalgatidou (2012) identified three classes of attacks, namely unfair feedback, inconsistent behavior and identity-based attacks. In unfair feedback attacks, malicious peers provide many unfairly high or low ratings to e.g.…”

Section: Exploiting Reputation Systemsmentioning

confidence: 99%

Interactive Reputation Systems

Sänger

Pernul

2017

Bus Inf Syst Eng

View full text Add to dashboard Cite

Early reputation systems use simple computation metrics that can easily be manipulated by malicious actors. Advanced computation models that mitigate their weaknesses, however, are non-transparent to the end-users thus lowering their understandability and the users' trust towards the reputation system. The paper proposes the concept of interactive reputation systems that combine the cognitive capabilities of the user with the advantages of robust metrics while preserving the system's transparency. Results of the evaluation show that interactive reputation systems increase both the users' detection ability (robustness) and understanding of malicious behavior while avoiding trade-offs in usability.

show abstract

Taxonomy of attacks and defense mechanisms in P2P reputation systems—Lessons for reputation system designers

Cited by 58 publications

References 56 publications

Modeling Dynamic Trust and Risk Evaluation Based on High-Order Moments

Modeling Dynamic Trust and Risk Evaluation Based on High-Order Moments

Reusable Defense Components for Online Reputation Systems

Interactive Reputation Systems

Contact Info

Product

Resources

About