SybilControl：用计算谜题进行实用的女巫防御
SybilControl: Practical Sybil Defense with Computational Puzzles
摘要：
许多分布式系统都受到Sybil攻击，其中对手通过模拟多个不同节点的行为来破坏系统操作。解决这个问题的最新工作利用社交网络来建立用户之间的信任关系。然而，社交网络的使用并不适合所有系统，因为它们可以被社会工程技术颠覆，需要P2P网络中的节点来维护和意识到社交网络信息，并且可能需要对社交链接的快速混合性质过于乐观的假设。本文探讨了另一种方法。我们提出了SybilControl，一种新的，分散的计划，用于控制Sybil攻击的程度。SybilControl是分布式系统中节点的准入控制机制，要求它们定期解决计算难题。SybilControl包括一个分布式协议，允许节点集体验证其他节点的计算工作，以及防止不执行计算工作的行为不端节点的恶意影响的机制。我们调查的实际问题，涉及到现有的DHT部署SybilControl，特别是弹性查找协议。我们通过模拟评估SybilControl，发现SybilControl保留低开销和延迟。此外，即使对手控制了20%的系统计算资源，启用SybilControl的DHT也可以配置为使用低通信开销将查找性能保持在99%以上的成功率。
英文摘要：
Many distributed systems are subject to the Sybil attack, where an adversary subverts system operation by emulating behavior of multiple distinct nodes. Most recent work to address this problem leverages social networks to establish trust relationships between users. However, the use of social networks is not appropriate in all systems, as they can be subverted by social engineering techniques, require nodes in a P2P network to maintain and be aware of social network information, and may require overly optimistic assumptions about the fast-mixing nature of social links. This paper explores an alternate approach. We present SybilControl, a novel, decentralized scheme for controlling the extent of Sybil attacks. SybilControl is an admission control mechanism for nodes in a distributed system that requires them to periodically solve computational puzzles. SybilControl consists of a distributed protocol to allow nodes to collectively verify the computational work of other nodes, and mechanisms to prevent the malicious influence of misbehaving nodes that do not perform the computational work. We investigate the practical issues involved with deploying SybilControl into existing DHTs, particularly with resilient lookup protocols. We evaluate SybilControl through simulations and find that SybilControl retains low overhead and latency. Additionally, even when the adversary controls 20% of the system's computational resources, SybilControl-enabled DHTs can be configured to maintain lookup performance at over 99% success rate using low communication overhead.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
