Analysis Of Security Policy In Practical Internet Coordinates

Xiaohan Zhao,Xiaoxiao Song,Xiao Wang,Yang Chen,Beixing Deng,Xing Li

2009-01-01

International Journal of Security and Its Applications

Abstract:Network Coordinate (NC) System is an effective mechanism to predict network delay with limited measure overhead. As one of the representative NC systems, Practical Internet Coordinates (PIC) has proposed a security policy based on triangle inequality to defend malicious nodes in the system. However, there is a natural phenomena that nodes may violate triangle inequality in Internet. Thus, the performance of PIC security policy is worthy to be well researched under different attacks. In this paper, we analyze the security policy in PIC in three real network delay data sets and compare PIC with security to without security under four typical attacks. The experimental results in this paper demonstrate that PIC is vulnerable to attacks while more TIVs will cause higher relative error of PIC. Moreover, under attacks by more than 40% malicious nodes, the performance of PIC with security policy could barely be better than PIC without security. Even Colluding Isolate attack will result in worse performance in PIC having security policy.