构建风险敏感的对等网安全信任模型

doi:10.13190/jbupt.201001.33.219

北京邮电大学学报 ›› 2010, Vol. 33 ›› Issue (1): 33-37.doi: 10.13190/jbupt.201001.33.219

构建风险敏感的对等网安全信任模型

陆峰;郑康锋;钮心忻;杨义先

(1. 北京邮电大学网络与交换技术国家重点实验室, 北京 100876; 2. 北京邮电大学网络与信息攻防技术教育部重点实验室, 北京 100876; 3. 北京邮电大学灾备技术国家工程实验室, 北京 100876)

收稿日期:2009-09-08 修回日期:2009-10-28 出版日期:2010-02-28 发布日期:2010-02-28
通讯作者: 陆峰

Construct a Risk-Aware Peer-to-Peer Security Trust Model

LU Feng；ZHENG Kang-feng；NIU Xin-xin；YANG Yi-xian

(1.State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China; 2.Key Laboratory of Network and Information Attack and Defence Technology, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing 100876, China; 3.National Engineering Laboratory for Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing 100876, China)

Received:2009-09-08 Revised:2009-10-28 Online:2010-02-28 Published:2010-02-28
Contact: Lu Feng

摘要/Abstract

摘要：

为在对等(P2P)网环境中构建一个高效、可扩展和安全的信任模型，研究了对等网信任模型，并提出了一种风险敏感的对等网信任模型. 该模型构建了一种新的风险信誉关系模型，并将风险因素推广到推荐信誉中. 借用了新的风险评估函数和串联概率模型计算方法，更加精确地量化了直接交易与间接推荐带来的风险. 为防止恶意节点的诋毁和协同作弊攻击，对推荐的局部信誉和局部信誉风险度采用了中心偏离度方法做去噪处理. 仿真实验和分析证明，该模型较其他模型有较大的性能提高，能大大增强系统的安全性.

关键词: 对等网, 信任模型, 风险评估, 推荐信誉, 局部信誉

Abstract:

To build an efficient, scalable, and security trust model in peer-to-peer (P2P) networks, the P2P trust model is studied and a risk-aware P2P trust model is built. This model constructs a new relationship model between risk and reputation, and interlards recommendation reputation with risk. By means of the new risk evaluation function and the computation of probability model in series, the risk brought by direct exchange and indirect recommendation is well quantified. To avoid slander or coordinated cheat attack among malicious nodes, this model filters the local recommendation reputation and local recommendation risk with the center deviation method. Through P2P networks simulations, the performance gains brought by this model are significant and the system security is greatly improved.

Key words: peer-to-peer network, trust model, risk evaluation, recommendation reputation, local reputation

陆峰;郑康锋;钮心忻;杨义先. 构建风险敏感的对等网安全信任模型[J]. 北京邮电大学学报, 2010, 33(1): 33-37.

LU Feng；ZHENG Kang-feng；NIU Xin-xin；YANG Yi-xian. Construct a Risk-Aware Peer-to-Peer Security Trust Model[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2010, 33(1): 33-37.

参考文献

[1] Altman J E. PKI security for JXTA overlay networks. Sun Microsystem Technical Report, 2003.
[2] Kamvar S D, Schlosser M T, Garcia-Molina H. The eigentrust algorithm for reputation management in P2P networks// WWW ’03. Budapest: ACM Press, 2003: 640-651.
[3] 窦文, 王怀民, 贾焰, 等. 构造基于推荐的peer-to-peer环境下的trust模型[J]. 软件学报, 2004, 15(4): 571-583. Dou Wen, Wang Huaimin, Jia Yan, et al. A recommendation-based peer-to-peer trust model [J]. Journal of Software, 2004, 15(4): 571-583.
[4] Zhou Runfang, Hwang K. Powertrust: a robust and scalable reputation system for trusted peer-to-peer computing[J]. IEEE Trans on Parallel and Distributed Systems, 2007, 18(4): 460-473.
[5] Xiong Li, Liu Ling. Peertrust: supporting reputation-based trust for peer-to-peer electronic communities[J]. IEEE Trans on Knowledge and Data Engineering, 2004, 16(7): 843-857.
[6] Yamamoto A, Asahara D, Itao T, et al. Distributed pagerank: a distributed reputation model for open peer-to-peer networks// SAINTW ’04. Japan: IEEE Computer Society Press, 2004: 389-394.
[7] Wang Yao, Vassileva J. Trust and reputation model in peer-to-peer networks//P2P’03. Washington: IEEE Computer Society, 2003: 150-157.
[8] Yu Bin, Singh M P. An evidential model of distributed reputation management// AAMAS ’02. Bologna: ACM Press, 2002: 82-93.
[9] 田春岐, 邹仕洪, 王文东, 等. 一种基于推荐证据的有效抗攻击P2P网络信任模型[J]. 计算机学报, 2008, 31(2): 270-281. Tian Chunqi, Zou Shihong, Wang Wendong, et al. A new trust model based on recommendation evidence for P2P networks[J]. Chinese Journal of Computers, 2008, 31(2): 270-281.
[10] Song Shanshan, Hwang K, Zhou Runfang. Trusted P2P transactions with fuzzy reputation aggregation[J]. IEEE Internet Computing, 2005, 9 (6): 24-34.
[11] Liang Zhengqiang, Shi Weisong. PET: a personalized trust model with reputation and risk evaluation for p2p resource sharing//The 38th International Conference on System Science. Hawaii: IEEE Computer Society Press, 2005: 256-264.
[12] 田春岐, 邹仕洪, 田慧蓉,等. 一种基于信誉和风险评价的分布式P2P 信任模型[J]. 电子信息学报, 2007, 29(7): 1628-1632. Tian Chunqi, Zou Shihong, Tian Huirong, et al. A new trust model based on reputation and risk evaluation for P2P networks[J]. Journal of Electronics and Information Technology, 2007, 29(7): 1628-1632.
[13] Schlosser T M, Condie T E, Kamvar S D. Simulating a file-sharing P2P network// Proceedings of the 1st Workshop on Semantics in P2P and Grid Computing. California:, 2003: 113-121.
[14] Schlosser T M, Condie T E, Kamvar S D. The stanford P2P sociology project. (2009-07-05). http://www. stanford. edu/~sdkamvar/research.

[1]	杨宏宇, 袁海航, 张良. 一种基于主机重要度的网络主机节点风险评估方法[J]. 北京邮电大学学报, 2022, 45(2): 16-21.
[2]	杨宏宇, 张乐, 张良. 一种基于风险传播的信息系统风险评估方法[J]. 北京邮电大学学报, 2021, 44(4): 41-48.
[3]	赵健, 王瑞, 李正民, 雷敏, 马敏耀. 物联网系统安全威胁和风险评估[J]. 北京邮电大学学报, 2017, 40(s1): 135-139.
[4]	刘宴兵, 宋秀丽, 肖永刚. 车联网认证机制和信任模型[J]. 北京邮电大学学报, 2017, 40(3): 1-18.
[5]	雷敏, 刘晓明, 张鸿, 王勉, 杨榆. 面向Web信息系统安全威胁和风险评估分析[J]. 北京邮电大学学报, 2016, 39(s1): 87-93.
[6]	张峰, 付俊, 杨光华, 景奕昕, 唐威. Web访问日志安全分析技术研究[J]. 北京邮电大学学报, 2014, 37(2): 93-98.
[7]	亓峰, 李琪, 韩骞, 杜益, 邱雪松. 基于神经网络的电力通信网风险评估方法[J]. 北京邮电大学学报, 2014, 37(1): 90-93.
[8]	葛海慧, 郑世慧, 陈天平, 杨义先. 信息安全威胁场景模糊风险评估方法[J]. 北京邮电大学学报, 2013, 36(6): 89-92,107.
[9]	王睿, 魏祥麟, 吴礼发. 隐私感知的Web服务信任模型[J]. 北京邮电大学学报, 2013, 36(5): 61-65.
[10]	韩挺, 罗守山, 辛阳, 朱洪亮, 李忠献. 面向MANET路由的多属性动态信任模型[J]. 北京邮电大学学报, 2013, 36(5): 86-89,104.
[11]	张春红, 胡清源, 程时端. 基于降维算法的分布式语义资源搜索[J]. 北京邮电大学学报, 2013, 36(2): 74-78.
[12]	魏祥麟陈鸣张国敏. 一种综合的结构化P2P系统负载均衡机制[J]. 北京邮电大学学报, 2012, 35(3): 87-90.
[13]	聂荣聂林刘超慧雷振明兰巨龙. BitTorrent网络特性的测量与研究[J]. 北京邮电大学学报, 2012, 35(3): 125-128.
[14]	巩思亮邢涛熊永平马建. 基于混合高斯分布的传感器网络主观信任模型[J]. 北京邮电大学学报, 2012, 35(2): 46-49.
[15]	钟尚勤徐国胜姚文斌杨义先. 基于主机安全组划分的网络安全性分析 [J]. 北京邮电大学学报, 2012, 35(1): 19-23.

构建风险敏感的对等网安全信任模型

Construct a Risk-Aware Peer-to-Peer Security Trust Model

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价