WO2009062429A1

WO2009062429A1 - Method, net node and system avoiding attacks in p2p network

Info

Publication number: WO2009062429A1
Application number: PCT/CN2008/072506
Authority: WO
Inventors: Feng Li; Xingfeng Jiang; Haifeng Jiang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-11-16
Filing date: 2008-09-25
Publication date: 2009-05-22
Also published as: CN101436926B; CN101436926A

Abstract

A method, net node and system avoiding attacks in a p2p network are disclosed. The method includes: sending the evidence proving that a node acts a malicious behavior to an upriver node of the node who acts a malicious behavior when detecting that the node acts malicious behavior in the p2p network; the upriver node recording the information of the node who acts a malicious behavior or the times of the node reported acting a malicious behavior; and when needing to forward a data message, selecting a node having no malicious behavior records or a node having less times of acting malicious behavior to transmit the data message.

Description

Method, network node and system for preventing attacks in P2P network

Technical field

The present invention relates to the field of P2P technologies, and in particular, to a method, a network node, and a system for preventing attacks in a P2P network. Background technique

Peer to Peer (P2P) is a distributed network. Network participants (Peer) share some of the hardware resources they have (processing power, storage capacity, network connectivity, printers, etc.). These shared resources. Services and content need to be provided by the network and can be accessed directly by other peers (Peer) without going through intermediate entities. Participants in this network are both providers of resources (services and content) and acquirers of resources (services and content). P2P breaks the traditional client/server (C/S) mode, and the status of each node in the network is peer-to-peer. Each node acts as a server, serves other nodes, and accepts services provided by other nodes.

P2P technology makes full use of the capabilities of each node in the system to provide services to each other. The use of P2P technology will greatly increase the utilization of these nodes, thereby further improving the efficiency of networks, devices and information services. P2P networks further include several types of structured, unstructured, and loosely structured. The characteristic of a structured P2P network is that the release of resources is closely related to the network topology. The resources are accurately distributed in the network according to the logical addresses in the P2P topology. Each node in such a network has a virtual logical address and makes all nodes form a relatively stable and compact topology based on the address. In structured P2P, the value generated after Hash (hash algorithm) is used as the key, and the generated key and its corresponding resource are recorded as key/value pairs. The resource is distributed in the structured P2P network according to the mapping relationship between the key and the P2P node, and the resource can be found in the P2P network by using the key. That is to say, in the P2P network, each peer needs to be responsible for storing a range of key values, which is based on a distributed hash algorithm. (Down Hash Table, DHT) is calculated. The range of key values calculated by different DHT algorithms is also different. Take the chord algorithm as an example: In the chord algorithm, assuming that Peer a and Peer b are neighbors, and the ID of Peer a is smaller than the ID of Peer b, the key value range of Peer a is from Peer a ID to Peer b ID. The key value of the range of values.

An important function of P2P is the routing of messages. In a structured P2P system, messages must be routed to destinations according to a certain algorithm according to a certain number of peers.

However, in a P2P network, since Peer is any user, some malicious users may appear in these users, and these algorithm rules are deliberately destroyed, resulting in the failure of other users' requests. Or through these special means to achieve the purpose of deceiving other users. Identity Attack is one of the attacks. The principle of this attack is: When a malicious node receives a request from a user, it knows that it is not the root node responsible for the requested key/value pair (root node. The DHT algorithm rule is responsible for a node of a key/value pair), but the malicious node no longer continues to route to the real root node according to the DHT algorithm rules, but rather calls itself the root node and returns the user to the requesting user. Any response returned, which can further implement the "phishing attack". Because the user who initiated the request in the P2P network does not know which node the key's root node is in, it is possible that the attacker will attack.

In the prior art, a method for discovering an identity attack is provided. In the overlay, each node selects several cooperative nodes (the number of which can be determined according to the network size), and the cooperative node may be some specific node in the network. It can also be a node selected according to a certain rule, for example, selecting n bits from NodelD to do the hash. Typically a collaborative node is responsible for preserving evidence for multiple nodes. Each time the node goes online, it generates an online evidence to send to these collaboration nodes, and maintains a keep-alive relationship with these collaboration nodes. When a node initiates a request to get a response, the requesting node estimates the space of the root node's Nodeld according to the distribution of the nodes in its routing table. Then, according to the space, the cooperative node of the node in the space is calculated, and then a request for obtaining evidence is sent to the cooperative node. If the cooperative node finds that a node closer to the key value exists, the evidence is returned to the node that initiated the request. The premise of this is: All messages are to be signed, and all messages have a timestamp. The requesting node compares the obtained response message with the evidence sent by the cooperative node. If the evidence proves that the node closer to the responding node should be the root node, the responding node is considered to be a malicious node, if the evidence returned is proved If no node closer than this node is responsible for this key value, then the message that the request response is valid is valid.

This scheme only provides a method for detecting identity attacks, that is, it is only used to discover malicious behaviors of malicious nodes, but this malicious node is not processed, and the next request cannot be prevented from being attacked by the same malicious node. Summary of the invention

In order to solve the above technical problem, an embodiment of the present invention provides a method for preventing an attack in a P2P network, including: receiving a malicious behavior notification message, where the malicious behavior notification message carries a malicious behavior information of the node; After the message is legal, the node malicious behavior information carried in the malicious behavior notification message is recorded; the node with no malicious behavior or the node with less malicious behavior record is selected as the next hop to forward the P2P data packet according to the recorded malicious behavior information of the node. . Another method for preventing an attack in a P2P network according to an embodiment of the present invention includes: receiving a malicious node notification message, where the malicious node notification message carries malicious node information; and determining that the malicious node notification message is legal, the recording office Describe the malicious node information carried in the malicious node notification message; select a non-malicious node or a node with less malicious records according to the recorded malicious node information as One-hop forwarding of P2P data packets.

The embodiment of the invention further provides a network node, including:

a receiving unit, configured to receive a malicious behavior notification message of the node;

a first determining unit, configured to determine a legality of a node malicious behavior notification message received by the receiving unit;

The first storage unit is configured to store the malicious behavior information of the node after the first determining unit determines that the malicious behavior notification message of the node is legal, and the malicious behavior information of the node includes the number of times the node is determined to be malicious.

Another network node provided by the embodiment of the present invention includes:

a receiving unit, configured to receive a malicious node notification message;

a first determining unit, configured to determine a validity of the malicious node notification message received by the receiving unit, where the first storage unit is configured to store the malicious node information after the first determining unit determines that the malicious node notification message is legal, The malicious node information includes the number of times the malicious node is determined to be malicious; the sending unit is configured to select a non-malicious node or a node with less malicious records as the next hop forwarding

P2P data message.

The P2P network system provided by the embodiment of the present invention includes a first node and a second node, where the first node is configured to determine whether a node that sends a response message is a malicious node, and when the node that sends the response message is a malicious node, Sending a malicious node notification message to the second node;

The second node is an upstream node of the malicious node, and the second node is configured to receive the malicious node notification message, determine the legality of the malicious node notification message, and record the malicious node notification message when the malicious node is notified The malicious node information, and after receiving the data packet, selects a non-malicious node or a node with less malicious records as the next hop to forward the data packet according to the recorded malicious node information.

Another P2P network system provided by the embodiment of the present invention includes a first node and a second node. The first node is configured to determine whether the behavior of the node that sends the response message is a malicious behavior, and send a node malicious behavior notification message to the second node when the behavior of the node that sends the response message is a malicious behavior;

The second node is an upstream node of a node that performs malicious behavior, and the second node is configured to receive the malicious behavior notification message of the node, determine the legality of the malicious behavior notification message of the node, and maliciously act on the node. When the notification message is legal, the node malicious behavior information is recorded, and the node with no malicious behavior or the node with less malicious behavior record is selected as the next hop to forward the P2P data packet according to the recorded malicious behavior information of the node.

When the node detects that there are other nodes in the P2P network to make malicious behavior, the embodiment sends evidence that the node performs malicious behavior to the upstream node of the node that made the malicious behavior, and the upstream node records the malicious behavior. The information of the node of the behavior and the number of times the node is notified of the malicious behavior, and when the data packet needs to be forwarded, the node that has no malicious behavior record or the node with less malicious behavior forwards the data packet, effectively reducing or avoiding The impact of nodes that have made malicious actions on the entire P2P network. DRAWINGS

1 is a flowchart of a first embodiment of a method for preventing an attack in a P2P network according to the present invention; FIG. 2 is a flowchart of a second embodiment of a method for preventing an attack in a P2P network according to the present invention; A schematic diagram of the structure of the network node of the invention;

4 is a schematic diagram of a system of a P2P network system according to the present invention. detailed description

Embodiments of the present invention provide a method for preventing an attack in a P2P network, and a P2P network system and a network node for preventing an attack. When the node detects that there are other nodes in the P2P network system to make malicious behavior, it will prove that the node made evidence of malicious behavior to the node that made the malicious behavior. The upstream node, the upstream node records the information of the node that made the malicious behavior and the number of times the node is notified of the malicious behavior, and selects the node with no malicious behavior record or the number of malicious behavior records when the data message needs to be forwarded. The node forwards the data packet to reduce or avoid the impact of the node that has made malicious behavior on the entire P2P network.

The invention is described in detail below with reference to the drawings and embodiments.

As shown in FIG. 4, it is a schematic diagram of a system of a P2P network system according to the present invention. Determined by the P2P network structure characteristics, the node A-G assumes the same work in the P2P network. In the P2P network, data packets are transmitted clockwise along the A-G direction. For ease of understanding, it is assumed that in a data processing process, A is the node that initiated the request, F is the root node of the key/value pair requested by the storage A, D is the node responding to the request of A, and C is the upstream node of D, The dotted line indicates the path to be forwarded, and the solid line indicates the notification message sent by node A.

As shown in FIG. 1, a flow chart of a first embodiment of a method for preventing an attack in a P2P network according to the present invention is shown. The method runs in the system shown in FIG. 4 and specifically includes the following steps:

511. The node A initiates a request message for acquiring a resource in the P2P network, where the request message carries a tag value of the resource. The request message is transmitted in the P2P network according to the routing rule of the P2P.

512. After receiving the resource request message, the node D sends a response message to the node A by using itself as the root node.

513. After receiving the response message sent by the node D, the node A determines whether the behavior of the node D sending the response message is malicious.

The node A can determine whether the behavior of the node D sending the response message is a malicious behavior by using the solution provided by the background of the present invention. That is, the node A knows through the cooperation node whether the node D is the root node responsible for the key requested by the node A, where Let me repeat.

514. Node A determines that the behavior of determining that node D sends a response message is a malicious behavior, and calculates a section. The upstream node of point D.

Preferably, node A can also save evidence that node D sends a response message that is malicious. The evidence may include a response message signed by node D and evidence that node D sent by the cooperating node is not responsible for the root node of the requested key.

515. Node A sends a malicious behavior notification message to node C, informing node D to make a malicious behavior. The malicious behavior notification message may carry evidence that the behavior of the node D transmitting the response message is malicious behavior.

516. After receiving the malicious behavior notification message sent by the node A, the node C determines whether the malicious behavior notification message is legal. If it is legal, step S17 is performed. If it is not legal, the malicious behavior may be discarded or not processed. The notification message may also confirm the behavior of the node A sending the notification message as a malicious behavior when the malicious behavior notification message is invalid.

Judging whether the malicious behavior notification message is legal can be performed according to whether the node A is a trusted node, or according to the evidence that the behavior of the certification node D carried in the malicious behavior notification message is a malicious behavior. If the evidence can prove that node D is not the root node responsible for the key requested by node A, then the behavior of node D sending the response message is considered malicious.

517. Node C records the malicious behavior information of node D. The malicious behavior information includes the information of the node D and the number of times the node D is notified of the malicious behavior.

518. After receiving the request for forwarding the P2P data packet, the node C first calculates the possible next hop node, and then selects the node with no malicious behavior record or the node with less malicious behavior record to forward the data packet from the nodes. .

As shown in FIG. 2, it is a flow chart of a second embodiment of a method for preventing an attack in a P2P network according to the present invention. The method also operates in the system shown in FIG. 4, and specifically includes the following steps:

S21. The node A initiates a request message for acquiring a resource in the P2P network, where the request message carries the resource. The tag value key. The request message is transmitted in the P2P network according to the routing rule of the P2P.

522. After receiving the resource request message, the node D sends a response message to the node A by using itself as the root node.

523. After receiving the response message sent by the node D, the node A determines whether the node D is a malicious node. Node A can use the scheme provided in the background of the present invention to determine whether node D is the root node responsible for the key requested by node A. If not, node D is considered to be a malicious node.

524. After determining that node D is a malicious node, node A calculates an upstream node of node D. Preferably, node A can also save evidence that node D is a malicious node. The evidence may include a response message signed by the node D and evidence that node D sent by the cooperating node is not responsible for the root node of the requested key.

525. Node A sends a malicious node notification message to node C, and notifies node D that it is a malicious node. The malicious node notification message may carry evidence that the node D is a malicious node.

526. After receiving the malicious node notification message sent by the node A, the node C determines whether the malicious node notification message is legal. If it is legal, step S27 is performed. If it is not legal, the malicious node may be discarded or not processed. The notification message may also be considered as a malicious node by the node A that sent the notification message.

Judging whether the malicious node notification message is legal can be performed according to whether the node A is a trusted node, or according to the evidence that the certification node D carried in the malicious node notification message is a malicious node. If the evidence can prove that node D is not the root node responsible for the key requested by node A, then node D is considered to be a malicious node.

S27. Node C records node D as a malicious node. It is also possible to record the number of times Node D is notified as a malicious node.

S28. After receiving the request for forwarding the P2P data packet, the node C first calculates the possible next hop. Point, and then select a non-malicious node from these nodes or a node that is notified that the number of malicious nodes is small to forward the data message.

FIG. 3 is a schematic structural diagram of a network node according to the present invention. Determined by the structural characteristics of the network, the network node can be any one of the A-Gs in Figure 4. This node includes:

a first receiving unit, configured to receive a malicious behavior notification message;

a first determining unit, configured to determine a legality of the malicious behavior notification message received by the first receiving unit;

a first storage unit, configured to store, after the first determining unit determines that the malicious behavior notification message is legal, storing malicious behavior information of the node, where the malicious behavior information includes a number of times the node behavior is determined to be malicious;

a first calculating unit, configured to calculate and select a next hop node of the forwarding file that has no malicious behavior record or has less malicious records;

a first sending unit, configured to forward the data packet;

a second receiving unit, configured to receive a response message;

a second determining unit, configured to determine whether the behavior of the node of the response message received by the second receiving unit is a malicious behavior;

a second storage unit, configured to store, after the second determining unit determines that the behavior of the node that sends the response message is a malicious behavior, storing the behavior as evidence of malicious behavior;

a second calculating unit, configured to calculate an upstream node of the node that performs the malicious behavior;

And a second sending unit, configured to send a malicious behavior notification message to an upstream node of the node that performs the malicious behavior.

Corresponding to another embodiment of the present invention, the first receiving unit in the network node of the present invention is further configured to receive a malicious node notification message; the first determining unit is further configured to determine the evil received by the first receiving unit The first storage unit is further configured to store the malicious node information after the first determining unit determines that the malicious node notification message is legal, and the malicious node information includes the number of times the node is determined to be malicious; The first calculating unit is further configured to calculate and select a next hop node of the non-malicious or maliciously recorded packet with less frequent number of records; the first sending unit is further configured to forward the P2P data packet; and the second receiving unit is further configured to receive a second determining unit is further configured to determine whether the node of the response message received by the second receiving unit is a malicious node; the second storage unit is further configured to determine, by the second determining unit, the sending response message After the node is a malicious node, the node is stored as a malicious node; the second computing unit is further configured to calculate an upstream node of the malicious node; and the second sending unit is further configured to send a malicious node notification message to the upstream node of the malicious node. By implementing the above-described embodiments of the present invention, it is possible to effectively reduce or avoid the influence of a node (malicious node) that has made malicious behavior on the entire P2P network.

The above description is only a preferred embodiment of the present invention, and it should be noted that any modification, equivalent replacement, and improvement made by those skilled in the art without departing from the principles of the present invention should be It is intended to be covered by the scope of the invention.

Claims

Rights request

A method for preventing an attack in a P2P network, characterized in that it comprises:

Receiving a malicious behavior notification message, where the malicious behavior notification message carries the node malicious behavior information; and after determining that the malicious behavior notification message is legal, recording the malicious behavior information of the node carried in the malicious behavior notification message;

According to the recorded malicious behavior of the node, the node with no malicious behavior or the node with less malicious behavior record is selected as the next hop to forward the P2P data packet.

2. The method for preventing an attack in a P2P network according to claim 1, wherein the receiving the malicious behavior notification message is that the upstream node of the node that performs the malicious behavior receives the malicious behavior notification message.

The method for preventing an attack in a P2P network according to claim 1 or 2, wherein the step of receiving the malicious behavior notification message further comprises the step of detecting, by the node that initiates the request message, the malicious behavior of the node.

The method for preventing an attack in a P2P network according to claim 3, wherein the step of detecting the malicious behavior of the node by the node that initiates the request message specifically includes:

After receiving the response message, the node that initiates the request message determines whether the node that sends the response message is the root node responsible for the tag value key carried in the request message, and if not, determines the behavior of sending the response message. Malicious behavior for the node.

The method for preventing an attack in a P2P network according to claim 4, wherein the step of detecting the malicious behavior of the node by the node that initiates the request message further comprises:

The node that initiates the request message records the malicious behavior information of the node, and sends a malicious behavior notification message to the upstream node of the node that performs the malicious behavior, carrying the malicious behavior information and proving the Behavior is evidence of malicious behavior.

6. The method for preventing an attack in a P2P network according to claim 5, wherein the evidence that the behavior is a malicious behavior comprises a response message signed by the node and proves that the node is not responsible for the request message. Evidence of the root node carrying the tag value key.

The method for preventing an attack in a P2P network according to claim 5 or 6, wherein the determining that the malicious behavior notification message is legal means that the upstream node of the node that performs the malicious behavior determines the initiation request message. The evidence sent by the node that proves that the node behaves as a malicious act is legal.

8. A network node, comprising:

The first storage unit is configured to store the malicious behavior information of the node after the first determining unit determines that the malicious behavior notification message is legal, and the malicious behavior information includes the number of times the node behavior is determined to be malicious.

The network node according to claim 8, further comprising:

The first sending unit is configured to forward the P2P data packet.

The network node according to claim 8, further comprising:

a second receiving unit, configured to receive a response message;

a second storage unit, configured to determine, at the second determining unit, the node that sends the response message After the behavior is malicious, the evidence is stored as evidence of malicious behavior.

The network node according to claim 10, further comprising:

12. A method for preventing an attack in a P2P network, characterized in that:

Receiving a malicious node notification message, where the malicious node notification message carries malicious node information; and after determining that the malicious node notification message is legal, recording the malicious node information carried in the malicious node notification message;

According to the recorded malicious node information, a non-malicious node or a node with less malicious records is selected as the next hop to forward P2P data packets.

13. A network node, comprising:

a first receiving unit, configured to receive a malicious node notification message;

a first determining unit, configured to determine a legality of the malicious node notification message received by the first receiving unit;

a first storage unit, configured to store malicious node information after the first determining unit determines that the malicious node notification message is legal, where the malicious node information includes a number of times the malicious node is determined to be malicious.

The network node according to claim 13, further comprising:

a first calculating unit, configured to calculate and select a next hop node of the non-malicious or maliciously recorded forwarding message;

The first sending unit is configured to forward the P2P data packet.

A P2P network system, comprising a first node and a second node, wherein the first node is configured to determine whether a node that sends a response message is a malicious node, and sends a response message in the When the node is a malicious node, sending a malicious node notification message to the second node;

A P2P network system, comprising a first node and a second node, wherein the first node is configured to determine whether a behavior of a node that sends a response message is a malicious behavior, and in the node that sends the response message When the behavior is a malicious behavior, sending a malicious behavior notification message to the second node; the second node is an upstream node of a node that performs malicious behavior, and the second node is configured to receive the malicious behavior notification message, Determining the legality of the malicious behavior notification message, recording the malicious behavior information of the node when the malicious behavior notification message is legal, and selecting a node with no malicious behavior or a node with less malicious behavior record according to the recorded malicious behavior information of the node Forwards P2P data packets as the next hop.