http://dikini.net/taxonomy/term/184/0 en http://dikini.net/17.07.2007/poisoning_a_distributed_system <p>The last few months I've been silently working on some 'population based' or 'social' methods. It is a long story, so I will revisit that part some day later. But the question I ask today is </p> <h4>what are the effects of poisoning a network</h4> <p>Or alternatively - how do different network topologies differ in their resistance to cancer cells? Disinformation? Spam? ???</p> <p>There was and there is still a lot of research ongoing in the Semantic Web community, but it looks like they live in the ideal world, the don't consider either failure or deliberate sabotage. But these effects are known, for example p2p poisoning by the big four, spamming google, poisoning spam-word indexes, etc... Poison pills are one of the most used and useful weapons in the so called cyber-warfare.</p> <p>I'm struggling to find useful research on the effects of poison. Any help is welcome. Can you post or help with references. I'll compile them and post them back here and on delicious, or wherever you fancy.</p> <h4>update 1</h4> <p>The guys down at <a href="http://freenetproject.org">freenet project</a> have done some research on p2p network attacks. A few groups are working on collaborative filtering. So here follows the first instalment of (semi-relevant) links</p> <ul> <li><a href="http://cis.poly.edu/~ross/papers/poison.pdf">The Index Poisoning Attack in P2P File Sharing Systems</a></li> <li><a href="http://www.math.chalmers.se/~ossa/p2ppres.pdf">Attacking P2P Networks</a></li> <li><a href="http://www.math.chalmers.se/~ossa/sw_background.pdf">Distributed Routing in Small Worlds - Background</a></li> <li><a href="http://www.math.chalmers.se/~ossa/lic.pdf">Searching in a Small World</a></li> <li><a href="http://www.cs.sfu.ca/~wangk/pub/dawakfin.pdf">RecTree: An Efficient Collaborative Filtering Method</a></li> <li><a href="http://www.ieor.berkeley.edu/~goldberg/pubs/eigentaste.pdf">Eigentaste: A Constant Time Collaborative Filtering Algorithm</a></li> <li><a href="http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf">Low-Resource Routing Attacks Against Anonymous Systems</a></li> </ul> <p><a href="http://dikini.net/17.07.2007/poisoning_a_distributed_system">read more</a></p> http://dikini.net/17.07.2007/poisoning_a_distributed_system#comment net networks p2p poison population based methods rdf semantic web spam Tue, 17 Jul 2007 09:45:32 -0400 vlado 262 at http://dikini.net http://dikini.net/21.06.2007/quick_and_dirty_httpbl_and_drupal_an_attempt_to_weed_out_evil_bots_a_bit <p>Lately I was looking into how to reduce the spam traffic to this website. Not just comment spam, but various harvesters and other nasties. They steal too much http bandwidth.</p> <p>.htaccess methods are tempting, but they have a huge disadvantage - they are static. DNS blacklists can be used to dynamically query 'is this ip a known threat?'. One such list is provided by <a href="http://www.projecthoneypot.org">project honepot</a>. They have an apache module in beta implementing it. If you don't have the option, or want a bit more dynamism, you can do the checks from your own php script. </p> <p>In drupal there is already an httpbl module, but I decided not to use it. It looked easier to just insert the checks in index.php. The other benefit is that I can interfere before the drupal bootstrap has even started. The downside - none of the goodies provided by the module. I used a modified version of the script provided by <a href="http://planetozh.com/blog/my-projects/honey-pot-httpbl-simple-php-script">planet ozh</a>.</p> <p><a href="http://dikini.net/21.06.2007/quick_and_dirty_httpbl_and_drupal_an_attempt_to_weed_out_evil_bots_a_bit">read more</a></p> http://dikini.net/21.06.2007/quick_and_dirty_httpbl_and_drupal_an_attempt_to_weed_out_evil_bots_a_bit#comment bots drupal httpbl project honeypot spam Thu, 21 Jun 2007 06:44:01 -0400 vlado 259 at http://dikini.net