Physical-social attributes integrated Sybil detection for Tor bridge distribution
As one of the most widely utilized censorship circumvention systems, Tor faces serious Sybil attacks in bridge distribution.Censors with rich network and human resources usually deploy a large number of Sybils, which disguise themselves as normal nodes to obtain bridges information and block them.In...
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
POSTS&TELECOM PRESS Co., LTD
2023-02-01
|
| Series: | 网络与信息安全学报 |
| Subjects: | |
| Online Access: | https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2023014 |
| _version_ | 1797262580408909824 |
|---|---|
| author | Xin SHI, Yunfei GUO, Yawen WANG, Xiaoli SUN, Hao LIANG |
| author_facet | Xin SHI, Yunfei GUO, Yawen WANG, Xiaoli SUN, Hao LIANG |
| author_sort | Xin SHI, Yunfei GUO, Yawen WANG, Xiaoli SUN, Hao LIANG |
| collection | DOAJ |
| description | As one of the most widely utilized censorship circumvention systems, Tor faces serious Sybil attacks in bridge distribution.Censors with rich network and human resources usually deploy a large number of Sybils, which disguise themselves as normal nodes to obtain bridges information and block them.In the process, due to the different identities, purposes and intentions of Sybils and normal nodes, individual or group behavior differences occur in network activities, called as node behavior characteristics.To handle the Sybil attacks threat, a Sybil detection mechanism integrating physical-social attributes was proposed based on the analysis of node behavior characteristics.The physical-social attributes evaluation methods were designed.The credit value of nodes objectively reflecting the operation status of bridges on the nodes and the suspicion index of nodes reflecting the blocking status of bridges, were utilized to evaluate the physical attributes of nodes.The social attributes of nodes were evaluated by the social similarity, which described the static attribute labels of nodes and their social trust characterizing the dynamic interaction behaviors of nodes.Furthermore, integrating the physical-social attributes, the credibility of nodes were defined as the possibility of the current node being a Sybil, which was exploited as a guidance on inferring the true identifies of nodes, so as to achieve accurate detection on Sybils.The detection performance of the proposed mechanism based on the constructed Tor network operation status simulator and the Microblog PCU dataset were simulated.The results show that the proposed mechanism can effectively improve the true positive rate on Sybils, and decrease the false positive rate.It also has stronger resistance on the deceptive behavior of censors, and still performs well in the absence of node social attributes. |
| first_indexed | 2024-04-24T23:59:22Z |
| format | Article |
| id | doaj.art-797f4af968314d7baedebfac2f06fbea |
| institution | Directory Open Access Journal |
| issn | 2096-109X |
| language | English |
| last_indexed | 2024-04-24T23:59:22Z |
| publishDate | 2023-02-01 |
| publisher | POSTS&TELECOM PRESS Co., LTD |
| record_format | Article |
| series | 网络与信息安全学报 |
| spelling | doaj.art-797f4af968314d7baedebfac2f06fbea2024-03-14T08:26:45ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2023-02-019110311410.11959/j.issn.2096-109x.2023014Physical-social attributes integrated Sybil detection for Tor bridge distributionXin SHI, Yunfei GUO, Yawen WANG, Xiaoli SUN, Hao LIANGAs one of the most widely utilized censorship circumvention systems, Tor faces serious Sybil attacks in bridge distribution.Censors with rich network and human resources usually deploy a large number of Sybils, which disguise themselves as normal nodes to obtain bridges information and block them.In the process, due to the different identities, purposes and intentions of Sybils and normal nodes, individual or group behavior differences occur in network activities, called as node behavior characteristics.To handle the Sybil attacks threat, a Sybil detection mechanism integrating physical-social attributes was proposed based on the analysis of node behavior characteristics.The physical-social attributes evaluation methods were designed.The credit value of nodes objectively reflecting the operation status of bridges on the nodes and the suspicion index of nodes reflecting the blocking status of bridges, were utilized to evaluate the physical attributes of nodes.The social attributes of nodes were evaluated by the social similarity, which described the static attribute labels of nodes and their social trust characterizing the dynamic interaction behaviors of nodes.Furthermore, integrating the physical-social attributes, the credibility of nodes were defined as the possibility of the current node being a Sybil, which was exploited as a guidance on inferring the true identifies of nodes, so as to achieve accurate detection on Sybils.The detection performance of the proposed mechanism based on the constructed Tor network operation status simulator and the Microblog PCU dataset were simulated.The results show that the proposed mechanism can effectively improve the true positive rate on Sybils, and decrease the false positive rate.It also has stronger resistance on the deceptive behavior of censors, and still performs well in the absence of node social attributes.https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2023014tor bridge distributionsybil detectionbehavior characteristicsphysical-social attributes |
| spellingShingle | Xin SHI, Yunfei GUO, Yawen WANG, Xiaoli SUN, Hao LIANG Physical-social attributes integrated Sybil detection for Tor bridge distribution 网络与信息安全学报 tor bridge distribution sybil detection behavior characteristics physical-social attributes |
| title | Physical-social attributes integrated Sybil detection for Tor bridge distribution |
| title_full | Physical-social attributes integrated Sybil detection for Tor bridge distribution |
| title_fullStr | Physical-social attributes integrated Sybil detection for Tor bridge distribution |
| title_full_unstemmed | Physical-social attributes integrated Sybil detection for Tor bridge distribution |
| title_short | Physical-social attributes integrated Sybil detection for Tor bridge distribution |
| title_sort | physical social attributes integrated sybil detection for tor bridge distribution |
| topic | tor bridge distribution sybil detection behavior characteristics physical-social attributes |
| url | https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2023014 |
| work_keys_str_mv | AT xinshiyunfeiguoyawenwangxiaolisunhaoliang physicalsocialattributesintegratedsybildetectionfortorbridgedistribution |