首页> 外文期刊>Information Security, IET >Hijacking the Vuze BitTorrent network: all your hop are belong to us
【24h】

Hijacking the Vuze BitTorrent network: all your hop are belong to us

机译:劫持Vuze BitTorrent网络:您的所有跃点均属于我们

获取原文
获取原文并翻译 | 示例
       

摘要

Vuze is a popular file-sharing client. When looking for content, Vuze selects from its list of neighbours, a set of 20 nodes to be contacted; the selection is performed such that the neighbours closest to the content in terms of Vuze ID are contacted first. To improve efficiency of its searches, Vuze implements a network coordinate system: from the set of 20 to-be-contacted nodes, queries are sent to the closest nodes in terms of network distance, which is calculated by the difference in network coordinates. However, network coordinate systems are inherently insecure and a malicious peer can lie about its coordinate to appear closest to every peer in the network. This allows the malicious peer to bias next-hop choices for victim peers such that queries will be sent to the attacker, thus hijacking every search query. In our experiments, almost 20% of the search queries are hijacked; the cost of performing this attack is minimal - less than $112/month.
机译:Vuze是一个受欢迎的文件共享客户端。当寻找内容时,Vuze从其邻居列表中选择要联系的20个节点的集合。执行选择,以便首先联系在Vuze ID方面最接近内容的邻居。为了提高搜索效率,Vuze实施了网络坐标系:从20个待联系节点的集合中,根据网络距离将查询发送到最近的节点,该距离由网络坐标的差异计算得出。但是,网络坐标系统本质上是不安全的,恶意对等方可能会谎称其坐标以最接近网络中的每个对等方。这允许恶意对等方偏向受害对等方的下一跳选择,以便将查询发送给攻击者,从而劫持每个搜索查询。在我们的实验中,几乎20%的搜索查询被劫持;实施此攻击的成本极低-每月不到$ 112。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号