arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 1012.1131cs.DC
收藏

一种用于P2P协作信任管理的日志审计方法

A Log Auditing Approach for Trust Management in Peer-to-Peer Collaboration

Hien Thi Thu Truong, Claudia-Lavinia Ignat

摘要:

如今,我们面临着越来越受欢迎的社会软件,包括维基,博客,微博和在线社交网络,如Facebook和MySpace。不幸的是,最常用的社交服务是集中的,个人信息存储在单个供应商处。这导致了潜在的隐私问题,因为用户对如何传播他们的私人数据没有太多的控制权。为了克服这一限制,最近的一些方法设想用基于对等信任的方法取代服务的单一权威中心化,在这种方法中,用户可以决定他们想要与谁共享他们的私人数据。在这种点对点协作中,很难确保在与其他对等点共享数据后,这些对等点不会行为不端并侵犯数据隐私。在本文中,我们提出了一种机制,解决了数据隐私侵犯的问题,由于数据泄露给恶意的同行。在我们的方法中,用户之间的信任值根据他们以前的活动进行调整的共享数据。用户通过指定接收者必须遵守的一些义务来共享他们的私人数据。我们记录用户对共享数据所做的修改以及共享数据时必须遵守的义务。通过日志审计机制,我们发现用户的行为不端,我们调整其相关的信任值,通过使用任何现有的分散的信任模型。

英文摘要:

Nowadays we are faced with an increasing popularity of social software including wikis, blogs, micro-blogs and online social networks such as Facebook and MySpace. Unfortunately, the mostly used social services are centralized and personal information is stored at a single vendor. This results in potential privacy problems as users do not have much control over how their private data is disseminated. To overcome this limitation, some recent approaches envisioned replacing the single authority centralization of services by a peer-to-peer trust-based approach where users can decide with whom they want to share their private data. In this peer-to-peer collaboration it is very difficult to ensure that after data is shared with other peers, these peers will not misbehave and violate data privacy. In this paper we propose a mechanism that addresses the issue of data privacy violation due to data disclosure to malicious peers. In our approach trust values between users are adjusted according to their previous activities on the shared data. Users share their private data by specifying some obligations the receivers must follow. We log modifications done by users on the shared data as well as the obligations that must be followed when data is shared. By a log-auditing mechanism we detect users that misbehaved and we adjust their associated trust values by using any existing decentralized trust model.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑