The Frog-Boiling attack: Limitations of secure network coordinate systems

ACM Transactions on Information and System Security

Volumn 14, Issue 3, 2011, Pages

  Chan Tin, Eric ^a   Heorhiadi, Victor ^b   Hopper, Nicholas ^b   Kim, Yongdae ^b  

^a OKLAHOMA STATE UNIVERSITY   (United States)

^b UNIVERSITY OF MINNESOTA   (United States)

Author keywords

Attack; Network coordinate; Secure

Indexed keywords

ATTACK; BITTORRENT; DISTRIBUTED REPUTATION SYSTEMS; EUCLIDEAN; NETWORK COORDINATE; NETWORK COORDINATES; NETWORK LATENCIES; OUTLIER DETECTION; SECURE; SECURE NETWORKS; STATISTICAL MEAN;

PHASE TRANSITIONS;

COMPUTER CRIME;

EID: 84855230119     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/2043621.2043627     Document Type: Conference Paper

References (42)

1. ABRAHAM, I. AND MALKHI, D. 2004. Compact routing on Euclidian metrics. In Proceedings of the 23rd Annual ACM Symposium on Principles of Distributed Computing (PODC'04). ACM, New York, NY, 141-149.
2. AGARWAL, S. AND LORCH, J. R. 2009. Matchmaking for online games and other latency-sensitive P2P systems. In Proceedings of the ACM SIGCOMM Conference on Data Communication (SIGCOMM'09). ACM, New York, NY, 315-326.
3. BAMBOO DHT. http://bamboo-dht.org. (accessed 2009).
4. BARRENO, M., NELSON, B., SEARS, R., JOSEPH, A. D., AND TYGAR, J. D. 2006. Can machine learning be secure? In Proceedings of the ACMSymposium on Information, Computer and Communications Security (ASIACCS'06). ACM, New York, NY, 16-25. (Pubitemid 46644722)
5. BAVIER, A., BOWMAN, M., CHUN, B., CULLER, D., KARLIN, S., MUIR, S., PETERSON, L., ROSCOE, T., SPALINK, T., AND WAWRZONIAK, M. 2004. Operating system support for planetary-scale network services. In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI'04). USENIX Association, Berkeley, CA, 19-19.
6. BAZZI, R. A. AND KONJEVOD, G. 2005. On the establishment of distinct identities in overlay networks. In Proceedings of the 24th Annual ACM Symposium on Principles of Distributed Computing (PODC'05). ACM, New York, NY, 312-320. (Pubitemid 43218411)
7. CHAN-TIN, E., FELDMAN, D.,KIM, Y., AND HOPPER, N. 2009. The frog-boiling attack: Limitations of anomaly detection for secure network coordinates. In Proceedings of the International ICST Conference on Security and Privacy in Communication Networks (SecureComm).
8. CHOFFNES, D. R. AND BUSTAMANTE, F. E. 2008. Taming the torrent: a practical approach to reducing cross-isp traffic in peer-to-peer systems. SIGCOMM Comput. Comm. Rev. 38, 4, 363-374.
9. COMMONSENSE. 2008. http://www.kimvdlinde.com/professional/programming/ statistics/ commonSense/body.html. (Accessed 2008).
10. COSTA, M., CASTRO, M., ROWSTRON, A., AND KEY, P. 2004. PIC: Practical internet coordinates for distance estimation. In Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS). 178-187.
11. COWLING, J., PORTS, D., LISKOV, B., POPA, R. A., AND GAIKWAD, A. 2009. Census: Location-aware membership management for large-scale distributed systems. In Proceedings of the USENIX Annual Technical Conference.
12. DABEK, F., COX, R., KAASHOEK, F., AND MORRIS, R. 2004a. Vivaldi: A decentralized network coordinate system. In Proceedings of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'04). ACM, New York, NY, 15-26. (Pubitemid 40954866)
13. DABEK, F., LI, J., SIT, E., ROBERTSON, J.,KAASHOEK, M. F., AND MORRIS, R. 2004b. Designing a DHT for low latency and high throughput. In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI). 85-98.
14. DENNING, D. E. 1987. An intrusion-detection model. IEEE Trans. Softw. Eng. 13, 2, 222-232.
15. DOUCEUR, J. R. 2002. The sybil attack. In Revised Papers from the 1st International Workshop on Peer-to- Peer Systems (IPTPS'01). Springer-Verlag, 251-260.
16. FRANCIS, P., JAMIN, S., JIN, C., JIN, Y., RAZ, D., SHAVITT, Y., AND ZHANG, L. 2001. IDMaps: A global internet host distance estimation service. IEEE/ACM Trans. Netw. 9, 5, 525-540. (Pubitemid 33048405)
17. GUMMADI, K. P., SAROIU, S., AND GRIBBLE, S. D. 2002. King: Estimating latency between arbitrary internet end hosts. In Proceedings of the 2nd ACM SIGCOMM Workshop on Internet Measurment (IMW'02). ACM, New York, NY, 5-18.
18. GUMMADI, R., GOVINDAN, R., KOTHARI, N., KARP, B., KIM, Y. J., AND SHENKER, S. 2004. Reduced state routing in the internet. In Proceedings of the ACM Workshop on Hot Topics in Networks.
19. KAAFAR, M. A., MATHY, L., TURLETTI, T., AND DABBOUS, W. 2006a. Real attacks on virtual networks: Vivaldi out of tune. In Proceedings of the SIGCOMM Workshop on Large-Scale Attack Defense (LSAD'06). ACM, New York, NY, 139-146. (Pubitemid 46740684)
20. KAAFAR, M. A., MATHY, L., TURLETTI, T., AND DABBOUS, W. 2006b. Virtual networks under attack: Disrupting internet coordinate systems. In Proceedings of the ACM CoNEXT Conference (CoNEXT'06). ACM, New York, NY, USA, 1-12.
21. KAAFAR, M. A., MATHY, L., BARAKAT, C., SALAMATIAN, K., TURLETTI, T., AND DABBOUS, W. 2007. Securing internet coordinate embedding systems. SIGCOMM Comput. Comm. Rev. 37, 4, 61-72. (Pubitemid 350239773)
22. KALMAN, R. E. 1960. A new approach to linear filtering and prediction problems. Trans. ASME J. Basic Engin. 82, Series D, 35-45.
23. LEDLIE, J., PIETZUCH, P., AND SELTZER, M. 2006. Stable and accurate network coordinates. In Proceedings of the 26th IEEE International Conference on Distributed Computing Systems (ICDCS'06). IEEE Computer Society, Los Alamitos, CA, 74.
24. LEDLIE, J., GARDNER, P., AND SELTZER, M. 2007. Network coordinates in the wild. In Proceedings of USENIX Symposium on Networked Systems Design and Implementation (NSDI'07).
25. LEDLIE, J., MITZENMACHER, M., AND SELTZER, M. 2007. Wired geometric routing. In Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS).
26. LEHMAN, L.-W. AND LERMAN, S. 2004. Pcoord: Network position estimation using peer-to-peer measurements. In Proceedings of the 3rd IEEE International Symposium on Network Computing and Applications (NCA'04). IEEE Computer Society, Los Alamitos, CA, 15-24. (Pubitemid 40681656)
27. LUA, E. K., GRIFFIN, T., PIAS, M., ZHENG, H., AND CROWCROFT, J. 2005. On the accuracy of embeddings for internet coordinate systems. In Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC'05). USENIX Association, Berkeley, CA, 11.
28. LUMEZANU, C., LEVIN, D., AND SPRING, N. 2007. Peer wise discovery and negotiation of faster path. In Proceedings of the ACM Workshop on Hot Topics in Networks.
29. NG, T. S. E. AND ZHANG, H. 2001. Predicting internet network distance with coordinates-based approaches. In Proceedings of the IEEE INFOCOM. 170-179.
30. NG, T. S. E. AND ZHANG, H. 2004. A network positioning system for the internet. In Proceedings of the USENIX Annual Technical Conference (ATEC'04). USENIX Association, Berkeley, CA, 11.
31. PIAS, M., CROWCROFT, J., WILBUR, S., HARRIS, T., AND BHATTI, S. 2003. Lighthouses for scalable distributed location. In Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS).
32. PIETZUCH, P., LEDLIE, J., AND SELTZER, M. 2005. Supporting network coordinates on planetlab. In Proceedings of the 2nd Conference on Real, Large Distributed Systems (WORLDS'05). USENIX Association, Berkeley, CA, 19-24.
33. PLANETLAB. http://planet-lab.org. (Accessed 2010).
34. PYXIDA. http://pyxida.sourceforge.net. (Accessed 2009).
35. RHEA, S., GODFREY, B., KARP, B., KUBIATOWICZ, J., RATNASAMY, S., SHENKER, S., STOICA, I., AND YU, H. 2005. Opendht: A public dht service and its uses. In Proceedings of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'05). ACM, New York, NY, 73-84. (Pubitemid 46323495)
36. SAUCEZ, D., DONNET, B., AND BONAVENTURE, O. 2007. A reputation-based approach for securing Vivaldi embedding system. In Proceedings of the 13th Open European Summer School and IFIP TC6.6 Conference on Dependable and Adaptable Networks and Services (EUNICE'07). Springer-Verlag, Berlin, Heidelberg, 78-85.
37. SHAVITT, Y. AND TANKEL, T. 2003. Big-bang simulation for embedding network distances in Euclidean space. In Proceedings of the IEEE INFOCOM.
38. SHERR, M., BLAZE, M., AND LOO, B. T. 2009. Veracity: Practical Secure Network Coordinates via Votebased Agreements. In Proceedings of the USENIX Annual Technical Conference. VUZE. http://azureus.sourceforge.net. (Accessed 2010).
39. WAGNER, D. AND SOTO, P. 2002. Mimicry attacks on host-based intrusion detection systems. In Proceedings of the 9th ACM Conference on Computer and Communications Security (CCS'02). ACM, New York, NY, 255-264.
40. WANG, G. AND NG, T. E. 2008. Distributed algorithms for stable and secure network coordinates. In Proceedings of the 8th ACMSIGCOMM Conference on Internet Measurement (IMC'08). ACM, New York, NY, 131-144.
41. WANG, G., ZHANG, B., AND NG, T. S. E. 2007. Towards network triangle inequality violation aware distributed systems. In Proceedings of the 7th ACM SIGCOMM Conference on Internet Measurement (IMC'07). ACM, New York, NY, 175-188.
42. ZAGE, D. J. AND NITA-ROTARU, C. 2007. On the accuracy of decentralized virtual coordinate systems in adversarial networks. In Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS'07). ACM, New York, NY, 214-224.