Addressing common vulnerabilities of reputation systems for electronic commerce

Journal of Theoretical and Applied Electronic Commerce Research

Volumn 7, Issue 1, 2012, Pages 1-20

  Yao, Yuan ^a   Ruohomaa, Sini ^b   Xu, Feng ^a  

^a NANJING UNIVERSITY   (China)

^b UNIVERSITY OF HELSINKI   (Finland)

Author keywords

Attacks and defenses; E commerce; Reputation systems; Robustness and security; Vulnerabilities

Indexed keywords

EID: 84859974140     PISSN: None     EISSN: 07181876     Source Type: Journal    
DOI: 10.4067/S0718-18762012000100002     Document Type: Article

References (87)

1. th International Conference on World Wide Web, Banff, Alberta, Canada, 2007, pp. 261-270.
2. B. Alcade, Trusted third party, who are you?, in Proceedings of the 4th International Conference on Trust Management, Morioka, Iwate, Japan, 2010, pp. 49-59.
3. R. Alnemr, S. Koenig, T. Eymann, and C. Meinel, Enabling usage control through reputation objects: A discussion on e-commerce and the internet of services environments, Journal of Theoretical and Applied Electronic Commerce Research, vol. 5, no. 2, pp. 59-76, 2010.
4. th International Conference on Distributed Computing Systems Workshops, Toronto, Canada, 2007.
5. R. Aringhieri, E. Damiani, S. D. C. Di Vimercati, S. Paraboschi, and P. Samarati, Fuzzy techniques for trust and reputation management in anonymous peer-to-peer systems, Journal of the American Society for Information Science and Technology, vol. 57, no. 4, pp. 528-537, 2006.
6. D. Artz and Y. Gil, A survey of trust in computer science and the semantic web, Web Semantics: Science, Services and Agents on the World Wide Web, vol. 5, no. 2, pp. 58-71, 2007.
7. K. Böhm, S. Etalle, J. Den Hartog, C. Hütter, S. Trabelsi, D. Trivellato, and N. Zannone, A flexible architecture for privacy-aware trust management, Journal of Theoretical and Applied Electronic Commerce Research, vol. 5, no. 2, pp. 77-96, 2010.
8. S. Buchegger and J.-Y. Le Boudec, A robust reputation system for mobile ad-hoc networks, KTH Royal Institute of Technology, Theoretical Computer Science Group, Technical Report, 2004.
9. S. Capkun, L. Buttyán, and J.-P. Hubaux, Self-organized public-key management for mobile ad hoc networks, IEEE Transactions on Mobile Computing, vol. 2, no. 1, pp. 52-64, 2003.
10. L. Capra, Engineering human trust in mobile system collaborations, in Proceedings of the 12th ACM SIGSOFT International Symposium on Foundations of Software Engineering, Newport Beach, CA, USA, 2004, pp. 107-116.
11. S. Casare and J. Sichman, Towards a functional ontology of reputation, in Proceedings of the 4th International Conference on Autonomous Agents and Multiagent Systems, Utrecht, The Netherlands, 2005, pp. 505-511.
12. D. W. Chadwick, Operational models for reputation servers, in Proceedings of the 3rd International Conference of Trust Management, Paris, France, 2005, pp. 108-115.
13. A. Cheng and E. Friedman, Sybilproof reputation mechanisms, in Proceedings of the 2005 ACM SIGCOMM Workshop on Economics of Peer-to-Peer Systems, Philadelphia, Pennsylvania, USA, 2005, pp. 128-132.
14. S. Dahan and M. Sato, Survey of six myths and oversights about distributed hash tables' security, in Proceedings of the 1st International Workshop on Trust and Reputation Management in Massively Distributed Computing Systems, Toronto, Canada, 2007.
15. C. Dellarocas, Immunizing online reputation reporting systems against unfair ratings and discriminatory behavior, in Proceedings of the 2nd ACM Conference on Electronic Commerce, Minneapolis, Minnesota, USA, 2000, pp. 150-157.
16. P. Dewan and P. Dasgupta, Securing P2P networks using peer reputations: Is there a silver bullet?, in Proceedings of the 2nd IEEE Consumer Communications and Networking Conference, Las Vegas, Nevada, USA, 2005, pp. 30-36.
17. T. Dimitriou, G. Karame, and I. Christou, SuperTrust-A secure and efficient framework for handling trust in super peer networks, in Proceedings of the 9th International Conference on Distributed Computing and Networking, Kolkata, India, January 2008, pp. 350-362.
18. J. R. Douceur, The Sybil attack, in Proceedings of the 1st International Workshop on Peer-to-Peer Systems, Cambridge, MA, USA, 2002, pp. 251-260.
19. ENISA, Reputation-based systems: A security analysis, European Network and Information Security Agency, Technical Report, October 2007.
20. E. Fehr and U. Fischbacher, The nature of human altruism, Nature, vol. 425, no. 6960, pp. 785-791, 2003.
21. M. Feldman, K. Lai, I. Stoica, and J. E. Chuang, Robust incentive techniques for peer-to-peer networks, in Proceedings of the 5th ACM Conference on Electronic commerce, New York, USA, 2004, pp. 102-111.
22. N. Gal-Oz, E. Gudes, and D. Hendler, A robust and knot-aware trust-based reputation model, in Proceedings of the 2nd Joint iTrust and PST Conferences on Privacy, Trust Management and Security, Trondheim, Norway, 2008, pp. 167-182.
23. S. Ganeriwal, L. K. Balzano, and M. B. Srivastava, Reputation-based framework for high integrity sensor networks, ACM Transactions on Sensor Networks, vol. 4, no. 3, pp. 1-37, 2008.
24. th International Conference on World Wide Web, New York, USA, 2004, pp. 403-412.
25. C.-W. Hang, Y. Wang, and M. P. Singh, An adaptive probabilistic trust model and its evaluation, in Proceedings of the 7th International Joint Conference on Autonomous Agents and Multiagent Systems, Estoril, Portugal, 2008, pp. 1485-1488.
26. R. Hasan, Z. Anwar, W. Yurcik, L. Brumbaugh, and R. Campbell, A survey of peer-to-peer storage techniques for distributed file systems, in Proceedings of International Conference on Information Technology: Coding and Computing, Las Vegas, Nevada, 2005, pp. 205-213.
27. K. Hoffman, D. Zage, and C. Nita-Rotaru, A survey of attack and defense techniques for reputation systems, ACM Computing Surveys, vol. 42, no. 1, pp. 1-31, 2009.
28. J. Huang and D. Nicol, A Formal-Semantics-Based calculus of trust, IEEE Internet Computing, vol. 14, no. 5, pp. 38-46, 2010.
29. A. Jøsang, An algebra for assessing trust in certification chains, in Proceedings of the Network and Distributed Systems Security Symposium, San Diego, California, USA, 1999.
30. th International Workshop on Security and Trust Management, Saint Malo, France, 2009.
31. A. Jøsang and J. Haller, Dirichlet reputation systems, in Proceedings of the 2nd International Conference on Availability, Reliability and Security, Vienna, Austria, 2007, pp. 112-119.
32. A. Jøsang and R. Ismail, The beta reputation system, in Proceedings of the 15th Bled Electronic Commerce Conference, vol. 160, Bled, Slovenia, 2002.
33. A. Jøsang, R. Ismail, and C. Boyd, A survey of trust and reputation systems for online service provision, Decision Support Systems, vol. 43, no. 2, pp. 618-644, 2007.
34. th International Conference of Trust Management, Pisa, Tuscany, Italy, 2006, pp. 179-192.
35. S. D. Kamvar, M. T. Schlosser, and H. Garcia-Molina, The Eigentrust algorithm for reputation management in p2p networks, in Proceedings of the 12th International Conference on World Wide Web, Budapest, Hungary, 2003, pp. 640-651.
36. R. Kerr and R. Cohen, Modeling trust using transactional, numerical units, in Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services, Markham, Ontario, Canada, 2006.
37. R. Kerr and R. Cohen, Smart cheaters do prosper: Defeating trust and reputation systems, in Proceedings of the 8th International Conference on Autonomous Agents and Multiagent Systems, Budapest, Hungary, 2009, pp. 993-1000.
38. M. Kinateder, E. Baschny, and K. Rothermel, Towards a generic trust model-comparison of various trust update algorithms, in Proceedings of the 3rd International Conference of Trust Management, Paris, France, 2005, pp. 177-192.
39. B. Kitchenham, O. Pearl Brereton, D. Budgen, M. Turner, J. Bailey, and S. Linkman, Systematic literature reviews in software engineering - A systematic literature review, Information and Software Technology, vol. 51, no. 1, pp. 7-15, 2009.
40. N. Koblitz and A. J. Menezes, A survey of public-key cryptosystems, SIAM Review, vol. 46, no. 4, pp. 599-634, 2004.
41. L. M. Kohnfelder, Towards a practical public-key cryptosystem, B.S. Thesis, Department of Electrical Engineering and Computer Science, Massachussetts Institute of Technology, Massachussetts, Cambridge, USA, 1978.
42. F. Li and J. Wu, Uncertainty modeling and reduction in MANETs, IEEE Transactions on Mobile Computing, vol. 9, no. 7, pp. 1035-1048, 2010.
43. Q. Li and K. M. Martin, A secure marketplace for online services that induces good conduct, in Proceedings of the 4th IFIP WG11.11 International Conference on Trust Management, Morioka, Iwate, Japan, 2010, pp. 65-72.
44. Z. Liang and W. Shi, PET: A personalized trust model with reputation and risk evaluation for P2P resource sharing, in Proceedings of the 38th Annual Hawaii International Conference on System Sciences, Big Island, Hawaii, USA, 2005.
45. nd International Conference on Trust Management, Oxford, UK, 2004, pp. 48-62.
46. L. Liu and W. Shi, Trust and reputation management, IEEE Internet Computing, vol. 14, no. 5, pp. 10-13, 2010.
47. F. G. Marmol and G. M. Pérez, Security threats scenarios in trust and reputation models for distributed systems, Computers & Security, vol. 28, no. 7, pp. 545-556, 2009.
48. S. Marti and H. Garcia-Molina, Taxonomy of trust: Categorizing P2P reputation systems, Computer Networks, vol. 50, no. 4, pp. 472-484, 2006.
49. A. Mislove, A. Post, P. Druschel, and K. P. Gummadi, Ostra: Leveraging trust to thwart unwanted communication, in Proceedings of the 5th USENIX Symposium on Networked Systems Design and Implementation, San Francisco, California, USA, 2008, pp. 15-30.
50. L. Mui, M. Mohtashemi, and A. Halberstadt, A computational model of trust and reputation, in Proceedings of the 35th Annual Hawaii International Conference on System Sciences, Big Island, HI, USA, 2002, pp. 2431-2439.
51. L. Mui, M. Mohtashemi, and A. Halberstadt, Notions of reputation in multi-agents systems: A review, in Proceedings of the 1st International Joint Conference on Autonomous Agents and Multiagent Systems, Bologna, Italy, 2002, pp. 280-287.
52. A. Nandi, T.-W. Ngan, A. Singh, P. Druschel, and D. S. Wallach, Scrivener: Providing incentives in cooperative content distribution systems, in Proceedings of the 6th ACM/IFIP/USENIX International Middleware Conference, Grenoble, France, 2005, pp. 270-291.
53. L. Page, S. Brin, R. Motwani, and T. Winograd, The PageRank citation ranking: Bringing order to the web, Stanford InfoLab, Techical Report, 1999.
54. J. Patel, W. L. Teacy, N. R. Jennings, and M. Luck, A probabilistic trust model for handling inaccurate reputation sources, in Proceedings of the 3rd International Conference of Trust Management, Paris, France, 2005, pp. 193-209.
55. R. Paul and Z. Richard, Trust among strangers in Internet transactions: Empirical analysis of eBay's reputation system, Advances in Applied Microeconomics: A Research Annual, vol. 11, no. 12, pp. 127-157, 2002.
56. S. Reece, A. Rogers, S. Roberts, and N. R. Jennings, Rumours and reputation: evaluating multi-dimensional trust within a decentralized reputation system, in Proceedings of the 6th International Joint Conference on Autonomous Agents and Multi-Agent Systems, Honolulu, Hawaii, USA, 2007, pp. 1063-1070.
57. P. Resnick, K. Kuwabara, R. Zeckhauser, and E. Friedman, Reputation systems, Communications of the ACM, vol. 43, no. 12, pp. 45-48, 2000.
58. M. Richardson, R. Agrawal, and P. Domingos, Trust management for the semantic web, in Proceedings of the 2nd International Semantic Web Conference, Sanibel Island, Florida, USA, 2003, pp. 351-368.
59. O. Roozmand, M. A. Nematbakhsh, and A. Baraani, An electronic marketplace based on reputation and learning, Journal of Theoretical and Applied Electronic Commerce Research, vol. 2, no. 1, pp. 1-17, 2007.
60. A. Ruiz-Martínez, D. Sánchez-Martínez, M. Martínez-Montesinos, and A. F. Gómez-Skarmeta, A survey of electronic signature solutions in mobile devices, Journal of Theoretical and Applied Electronic Commerce Research, vol. 2, no. 3, pp. 94-109, 2007.
61. S. Ruohomaa, A. Hankalahti, and L. Kutvonen, Detecting and reacting to changes in reputation flows, in Proceedings of 5th IFIP WG 11.11 International Conference on Trust Management, Copenhagen, Denmark, 2011, pp. 19-34.
62. S. Ruohomaa and L. Kutvonen, Trust management survey, in Proceedings of the 3rd International Conference on Trust Management, Paris, France, 2005, pp. 77-92.
63. S. Ruohomaa and L. Kutvonen, Trust and distrust in adaptive inter-enterprise collaboration management, Journal of Theoretical and Applied Electronic Commerce Research, vol. 5, no. 2, pp. 118-136, 2010.
64. S. Ruohomaa and L. Kutvonen, From subjective reputation to verifiable experiences-implementing social control in open service ecosystems, University of Helsinki, Department of Computer Science, Techical Report, March 2011.
65. nd International Conference on Availability, Reliability and Security, Vienna, Austria, 2007, pp. 103-111.
66. J. Sabater and C. Sierra, Reputation and social network analysis in multi-agent systems, in Proceedings of the 1st International Joint Conference on Autonomous Agents and Multiagent Systems, Bologna, Italy, 2002, pp. 475-482.
67. J. Sabater and C. Sierra, Review on computational trust and reputation models, Artificial Intelligence Review, vol. 24, no. 1, pp. 33-60, 2005.
68. R. Sherwood, S. Lee, and B. Bhattacharjee, Cooperative peer groups in NICE, Computer Networks, vol. 50, no. 4, pp. 523-544, 2006.
69. V. Shmatikov and C. Talcott, Reputation-based trust management, Journal of Computer Security, vol. 13, no. 1, pp. 167-190, 2005.
70. A. Singh and L. Liu, TrustMe: anonymous management of trust relationships in decentralized P2P systems, in Proceedings of the 3rd International Conference on Peer-to-Peer Computing, Linkoping, Sweden, 2003, pp. 142-149.
71. S. Song, K. Hwang, R. Zhou, and Y.-K. Kwok, Trusted P2P transactions with fuzzy reputation aggregation, IEEE Internet Computing, vol. 9, no. 6, pp. 24-34, 2005.
72. M. Srivatsa, L. Xiong, and L. Liu, TrustGuard: Countering vulnerabilities in reputation management for decentralized overlay networks, in Proceedings of the 14th International Conference on World Wide Web, Chiba, Japan, 2005, pp. 422-431.
73. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan, Chord: A scalable peer-to-peer lookup service for Internet applications, in Proceedings of the 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, San Diego, California, United States, 2001, pp. 149-160.
74. Y. L. Sun, Z. Han, W. Yu, and K. R. Liu, A trust evaluation framework in distributed networks: Vulnerability analysis and defense against attacks, in Proceedings of the 25th International Conference on Computer Communications, joint Conference of the IEEE Computer and Communications Societies, Barcelona, Catalunya, Spain, 2006, pp. 230-236.
75. P.-N. Tan, M. Steinbach, and V. Kumar, Introduction to data mining. Massachusetts: Addison-Wesley, 2006.
76. T. Tran and R. Cohen, Improving user satisfaction in agent-based electronic marketplaces by reputation modelling and adjustable product quality, in Proceedings of the 3rd International Joint Conference on Autonomous Agents and Multiagent Systems, New York, USA, 2004, pp. 828-835.
77. L. Viljanen, Towards an ontology of trust, in Proceedings of the 2nd International Conference on Trust, Privacy and Security in Digital Business, Copenhagen, Denmark, 2005, pp. 175-184.
78. K. Walsh and E. G. Sirer, Experience with an object reputation system for peer-to-peer filesharing, in Proceedings of the 3rd Symposium on Networked Systems Design and Implementation, San Jose, CA, USA, 2006, pp. 1-14.
79. Y. Wang and M. P. Singh, Trust representation and aggregation in a distributed agent system, in Proceedings of the 21st National Conference on Artificial Intelligence and the 18th Innovative Applications of Artificial Intelligence Conference, Boston, Massachusetts, USA, 2006, pp. 1425-1430.
80. Y. Wang and M. P. Singh, Formal trust model for multiagent systems, in Proceedings of the 20th International Joint Conference on Artificial Intelligence, Hyderabad, India, 2007, pp. 1551-1556.
81. L. Xiong and L. Liu, Peertrust: Supporting reputation-based trust for peer-to-peer electronic communities, IEEE Transactions on Knowledge and Data Engineering, vol. 16, no. 7, pp. 843-857, 2004.
82. B. Yu and M. P. Singh, A social mechanism of reputation management in electronic communities, in Proceedings of the 4th International Workshop on Cooperative Information Agents IV, The Future of Information Agents in Cyberspace, Boston, MA, USA, 2000, pp. 355-393.
83. H. Yu, P. B. Gibbons, M. Kaminsky, and F. Xiao, Sybillimit: A near-optimal social network defense against Sybil attacks, IEEE/ACM Transactions on Networking, vol. 18, no. 3, pp. 885-898, 2010.
84. H. Yu, M. Kaminsky, P. B. Gibbons, and A. Flaxman, Sybilguard: Defending against Sybil attacks via social networks, in Proceedings of the 2006 ACM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, Pisa, Italy, 2006, pp. 267-278.
85. L. A. Zadeh, Fuzzy logic and approximate reasoning, Synthese, vol. 30, no. 3, pp. 407-428, 1975.
86. R. Zhou and K. Hwang, Gossip-based reputation aggregation for unstructured peer-to-peer networks, in Proceedings of the 21th International Parallel and Distributed Processing Symposium, Long Beach, California, USA, 2007, pp. 1-10.
87. R. Zhou and K. Hwang, Powertrust: A robust and scalable reputation system for trusted peer-to-peer computing, IEEE Transactions on Parallel and Distributed Systems, vol. 18, no. 4, pp. 460-473, 2007.