NDLI: $Re^{3}:$ relay reliability reputation for anonymity systems

Please wait, while we are loading the content...

Fighting malicious code: an eternal struggle

Letting the puss in boots sweat: detecting fake access points using dependency of clock skews on temperature

$Re^{3}:$ relay reliability reputation for anonymity systems

Maple: scalable multi-dimensional range search over encrypted cloud data with tree-based index

On the effectiveness of risk prediction based on users browsing behavior

Modelling after-the-fact leakage for key exchange

Efficient, context-aware privacy leakage confinement for android applications without firmware modding

On the feasibility of software attacks on commodity virtual machine monitors via direct device assignment

The harvester, the botmaster, and the spammer: on the relations between the different actors in the spam landscape

Practical user authentication leveraging channel state information (CSI)

Evading android runtime analysis via sandbox detection

How many down?: toward understanding systematic risk in networks

Cyber defenses for physical attacks and insider threats in cloud computing

Covert ephemeral communication in named data networking

Design and evaluation of persea, a sybil-resistant DHT

Privacy of outsourced k-means clustering

Protecting users against XSS-based password manager abuse

Practical secret key agreement for full-duplex near field communications

Malware detection with quantitative data flow graphs

After we knew it: empirical study and modeling of cost-effectiveness of exploiting prevalent known vulnerabilities across IaaS cloud

pTwitterRec: a privacy-preserving personalized tweet recommendation framework

Outsourceable two-party privacy-preserving biometric authentication

VirtualSwindle: an automated attack against in-app billing on android

Prover anonymous and deniable distance-bounding authentication

Monkey-in-the-browser: malware and vulnerabilities in augmented browsing script markets

Scanner hunter: understanding HTTP scanning traffic

OTIT: towards secure provenance modeling for location proofs

PIDGIN: privacy-preserving interest and content sharing in opportunistic networks

A three-way investigation of a game-CAPTCHA: automated attacks, relay attacks and usability

Multi-recipient encryption, revisited

Abstract model counting: a novel approach for quantification of information leaks

Prospect: peripheral proxying supported embedded code testing

Shades of gray: a closer look at emails in the gray area

Understanding OSN-based facial disclosure against face authentication systems

DroidRay: a security evaluation system for customized android firmwares

Why eve and mallory (also) love webmasters: a study on the root causes of SSL misconfigurations

IntentFuzzer: detecting capability leaks of android applications

Detection of stealthy malware activities with traffic causality and scalable triggering relation discovery

Privacy-preserving distance computation and proximity testing on earth, done right

S-ORAM: a segmentation-based oblivious RAM

Fully secure key-policy attribute-based encryption with constant-size ciphertexts and fast decryption

ConXsense: automated context classification for context-aware access control

Scanning of real-world web applications for parameter tampering vulnerabilities

Tracing and revoking leaked credentials: accountability in leaking sensitive outsourced data

APKLancet: tumor payload diagnosis and purification for android applications

YourPassword: applying feedback loops to improve security behavior of managing multiple passwords

Remotely wiping sensitive data on stolen smartphones

Towards automated protocol reverse engineering using semantic information

Differential privacy with δ-neighbourhood for spatial and dynamic datasets

Improved anonymous proxy re-encryption with CCA security

Sufficient conditions for vertical composition of security protocols

$Re^{3}:$ relay reliability reputation for anonymity systems

Content Provider	ACM Digital Library
Author	Das, Anupam Borisov, Nikita Caesar, Matthew Mittal, Prateek
Abstract	To conceal user identities, Tor, a popular anonymity system, forwards traffic through multiple relays. These relays, however, are often unreliable, leading to a degraded user experience. Worse yet, malicious relays may strategically introduce deliberate failures to increase their chance of compromising anonymity. In this paper we propose a reputation system that profiles the reliability of relays in an anonymity system based on users' past experience. A particular challenge is that an observed failure in an anonymous communication cannot be uniquely attributed to a single relay. This enables an attack where malicious relays can target a set of honest relays in order to drive down their reputation. Our system defends against this attack in two ways. Firstly, we use an adaptive exponentially-weighted moving average (EWMA) that ensures malicious relays adopting time-varying strategic behavior obtain low reputation scores over time. Secondly, we propose a filtering scheme based on the evaluated reputation score that can effectively discard relays involved in such attacks. We use probabilistic analysis, simulations, and real-world experiments to validate our reputation system. We show that the dominant strategy for an attacker is to not perform deliberate failures, but rather maintain a high quality of service. Our reputation system also significantly improves the reliability of path construction even in the absence of attacks. Finally, we show that the benefits of our reputation system can be realized with a moderate number of observations, making it feasible for individual clients to perform their own profiling, rather than relying on an external entity.
Starting Page	63
Ending Page	74
Page Count	12
File Format	PDF
ISBN	9781450328005
DOI	10.1145/2590296.2590338
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-06-04
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Reputation systems Tor network Anonymity Dos attack
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in