Received 14.03.2022, Revised 20.06.2022, Accepted 25.07.2022

Analysis of security problems of peer-to-peer networks

Leonid Kupershtein, Mykhailo Krentsin, Andrii Dudatyev, Valentyna Kaplun

The basic concepts of peer-to-peer networks are analyzed. The current areas of their use are indicated, namely file-sharing services, teleconferencing systems, gaming and trade services, etc. The types of structural organization are considered, and their advantages and disadvantages are determined. According to the degree of centralization, pure, hybrid and federal architectures are distinguished. The classification of peer-to-peer peer networks by connection method and function is also given. Analysis of the prevalence of peer-to-peer networks in the modern world has proved the demand and relevance of the use of decentralized network technology, especially in the field of finance. Possible types of attacks on peer-to-peer networks are analyzed. Both general and specific attacks are highlighted. Specific attacks are oriented on user, application or network. Methods and mechanisms of protection for each of the studied types of attacks are given. The results of the analysis are systematized, namely for each attack the impact on the data, the degree of danger and the level of protection is determined. It also indicates the direction of violation of information security of each attack, namely the integrity, accessibility, confidentiality. It turned out to be no less interesting for malefactors, as evidenced by the significant number of hacks. The research of attacks on P2P networks showed a wide range of both general and specialized. At the same time, attacks are differentiated according to the degree of danger and the aspect of security breach. The most dangerous were attacks that could violate the confidentiality and integrity of data. These include the following attacks: distributed denial of service, index poisoning, sibyl attack, eclipse attack, botnets, masquerade. The research is the basis for further study of the shortcomings of the protection of peer-to-peer networks and the development of new secure mechanisms for data exchange in decentralized structures

peer-to-peer network, central server, peer, routing, authentication, firewall
5-14
Kupershtein, L., Krentsin, M., Dudatyev, A., & Kaplun, V. (2022). Analysis of security problems of peer-to-peer networks. Information Technologies and Computer Engineering, 19(2), 5-14. https://doi.org/10.31649/1999-9941-2022-54-2-5-14

References

[1]      Buford, J., Yu, H., & Lua, E.K. (2008). P2P networking and applications. San Francisco: Morgan Kaufmann Publishers Inc.

[2]      The social forces behind the development of usenet by michael hauben. (1995). Retrieved from http://www.columbia.edu/~hauben/book/ch106.x03.

[3]      P2P Networking. (2019). Retrieved from https://nakamoto.com/p2p-networking.

[4]      Peer-To-Peer VOiP. (n.d.). Retrieved from https://www.tmcnet.com/voip/0907/feature-articles-peer-topeer-voip.htm.

[5]      All.Net. (n.d.). Retrieved from http://all.net.

[6]      Axie Infinity's Ronin network suffers hack and theft of over $600 million – CNN. (2022). Retrieved from https://edition.cnn.com/2022/03/29/tech/axie-infinity-ronin-hack/index.html.

[7]      Hackers steal cryptocurrency worth $80 million from decentralised finance platform Qubit finance. (n.d.). Retrieved from https://www.ndtv.com/business/cryptocurrency-worth-80-million-stolenfrom-defi-platform-qubit-finance-2737888.

[8]      HackRead (n.d.). Retrieved from https://www.hackread.com.

[9]      Kupershtein, L.M., & Krentsin, M.D. (2021). Analysis of peering network development trends. Bulletin of the Khmelnytskyi National University, 4, 25-29.

[10]    Decentralized social networks: Comparing federated and peer-to-peer protocols. (2020). Retrieved from https://medium.com/decentralizedweb/decentralized-social-networks-e5a7a2603f53.

[11]    Cabani, A., Ramaswamy, S., Itmi, M., Al-Shukri, S., & Pécuchet, J. (2007). Distributed computing systems: P2P versus grid computing alternatives. In: T. Sobh (Eds.), Innovations and advanced techniques in computer and information sciences and engineering (pp 47-52). Dordrecht: Springer. doi: 10.1007/978-1-4020-6268-1_9.

[12]    Best 10 Peer to Peer (P2P) file sharing programs and applications XtendedView. (2021). Retrieved from https://xtendedview.com/internet/best-p2p-file-sharing-programs/5684.

[13]    Bandara, H.M.N.D., & Jayasumana, A.P. (2013). Collaborative applications over Peer-to-Peer systems – challenges and solutions. Peer-to-Peer Networking and Applications, 6, 257-276. doi: 10.1007/s12083012-0157-3.

[14]    SETI@home. (n.d.). Retrieved from http://setiathome.ssl.berkeley.edu.

[15]    Ferdous, Md.S., Chowdhury, F., & Moniruzzaman Md. (2007). A taxonomy of attack methods on Peer-to-Peer network. In Proceedings of the 1st Indian conference on computational intelligence and information security (pp. 132-138). New Delhi: New Delhi Allied Publishers

[16]    Wattenhofer, R. (2005). Attacks on Peer-to-Peer networks. In Semester thesis of Swiss Federal Institute of Thechnology (pp. 1-36). Zurich: Swiss Federal Institute of Thechnology.

[17]    Voitovych, O.P., Baryshev, Y.V., Kupershtein, L.M., & Kolibabchuk, E.I. (2016). Investigation of simple denial-of-service attacks. In Third international IEEE conference “Problems of infocommunications. science and technology” (pp. 1-4). Kharkiv: IEEE.

[18]    Kupershtein, L., Martyniuk, T., Voitovych, O., Kulchytskyi, B., Kozhemiako A., Sawicki, D., & Kalimoldayev M. (2019). DDoS-attack detection using artificial neural networks in Matlab. In Photonics applications in astronomy, communications, industry, and high-energyphysics experiments (Vol. 1117, article number 111761S). Wilga: SPIE. doi: 10.1117/12.2536478.

[19].   Bagnyuk, N.V., Melnyk, V.M., Klekha, O.V., & Nevidymskyi, I.A. (2015). Types of DDoS attacks and the algorithm for detecting DDoS attacks of the flood-attack type. Computer-Integrated Technologies : Education, Science, Production, 18, 6-12.

[20]    Abdallah, E.M., & Jung, J.C. (2018). Development of field programmable gate array–based encryption module to mitigate man-in-the-middle attack for nuclear power plant data communication net-work. Nuclear Engineering and Technology, 50, 780-787. doi:10.1016/j.net.2018.01.018.

[21]    Fan, X., & Xiang, Y. (2010). Propagation modeling of Peer-to-Peer worms. In 24th IEEE International conference on advanced information networking and applications (pp. 1128-1135). Rockhampton: Central Queensland University.

[22]    Stallings, W. (2013). Cryptography and network secrity: Principles and practices (6th ed.) New Jersey: Prentice Hall.

[23]    Liang, J., Naoumov, N., & Ross, K.W. (2006). The index poisoning attack in P2P file sharing systems. In 25th IEEE international conference on computer communications (pp. 1-12). New York: Brooklyn Polytechnic Univerisy.

[24]    Schiller, C., Binkley, J., Harley, D., Evron, G., Bradley, T., Willems, C., & Cross, M. (2007). Botnets − the killer Web App. Rockland: Syngress.

[25]    Castro, M., Druschel, P., Ganesh, A., Rowstron, A., & Wallach, D. (2003). Secure routing for structured peer-topeer overlay networks. SIGOPS Operating Systems Review, 36(SI), 299-314. doi:10.1145/844128.844156.

[26]    Stutzbach, D., & Rejaie, R. (2006). Understanding churn in peer-to-peer networks. In IMC ’06: Proceedings of the 6th ACM SIGCOMM conference on Internet measurement (pp. 189-202). New York: Association for Computing Machinery.

[27]    Vasudeva, A., & Sood, M. (2018). Survey on sybil attack defense mechanisms in wireless ad hoc networks. Network and Computer Applications, 120, 78-118, doi: 10.1016/j.jnca.2018.07.006.

[28]    Ai, W., Xinsong, L., & Kejian, L. (2006). Efficient flooding in peer-to-peer networks. In 7th international conference on computer-aided industrial design and conceptual design (pp. 1-6). Hangzhou: IEEE. doi: 10.1109/CAIDCD.2006.329410.