[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[freehaven-cvs] add the html version of the talk slideshow
Update of /home/freehaven/cvsroot/doc/econp2p03/slides-html
In directory moria.mit.edu:/home/arma/work/freehaven/doc/econp2p03/slides-html
Added Files:
index.html mgp00001.html mgp00001.idx.jpg mgp00001.jpg
mgp00001.txt mgp00002.html mgp00002.idx.jpg mgp00002.jpg
mgp00002.txt mgp00003.html mgp00003.idx.jpg mgp00003.jpg
mgp00003.txt mgp00004.html mgp00004.idx.jpg mgp00004.jpg
mgp00004.txt mgp00005.html mgp00005.idx.jpg mgp00005.jpg
mgp00005.txt mgp00006.html mgp00006.idx.jpg mgp00006.jpg
mgp00006.txt mgp00007.html mgp00007.idx.jpg mgp00007.jpg
mgp00007.txt mgp00008.html mgp00008.idx.jpg mgp00008.jpg
mgp00008.txt mgp00009.html mgp00009.idx.jpg mgp00009.jpg
mgp00009.txt mgp00010.html mgp00010.idx.jpg mgp00010.jpg
mgp00010.txt mgp00011.html mgp00011.idx.jpg mgp00011.jpg
mgp00011.txt mgp00012.html mgp00012.idx.jpg mgp00012.jpg
mgp00012.txt mgp00013.html mgp00013.idx.jpg mgp00013.jpg
mgp00013.txt mgp00014.html mgp00014.idx.jpg mgp00014.jpg
mgp00014.txt mgp00015.html mgp00015.idx.jpg mgp00015.jpg
mgp00015.txt mgp00016.html mgp00016.idx.jpg mgp00016.jpg
mgp00016.txt
Log Message:
add the html version of the talk slideshow
--- NEW FILE: index.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="mgp00001.html"><IMG SRC="mgp00001.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 1"></A>
<A HREF="mgp00002.html"><IMG SRC="mgp00002.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 2"></A>
<A HREF="mgp00003.html"><IMG SRC="mgp00003.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 3"></A>
<A HREF="mgp00004.html"><IMG SRC="mgp00004.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 4"></A>
<A HREF="mgp00005.html"><IMG SRC="mgp00005.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 5"></A>
<A HREF="mgp00006.html"><IMG SRC="mgp00006.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 6"></A>
<A HREF="mgp00007.html"><IMG SRC="mgp00007.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 7"></A>
<A HREF="mgp00008.html"><IMG SRC="mgp00008.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 8"></A>
<A HREF="mgp00009.html"><IMG SRC="mgp00009.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 9"></A>
<A HREF="mgp00010.html"><IMG SRC="mgp00010.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 10"></A>
<A HREF="mgp00011.html"><IMG SRC="mgp00011.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 11"></A>
<A HREF="mgp00012.html"><IMG SRC="mgp00012.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 12"></A>
<A HREF="mgp00013.html"><IMG SRC="mgp00013.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 13"></A>
<A HREF="mgp00014.html"><IMG SRC="mgp00014.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 14"></A>
<A HREF="mgp00015.html"><IMG SRC="mgp00015.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 15"></A>
<A HREF="mgp00016.html"><IMG SRC="mgp00016.idx.jpg" WIDTH=256 HEIGHT=192 ALT="Page 16"></A>
<HR>
Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
<BR>
</BODY></HTML>
--- NEW FILE: mgp00001.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00001.txt>[text page]</A> [<<start] [<prev] <A HREF=mgp00002.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 1: Reputation and Anonymity<BR>
<HR>
<IMG SRC="mgp00001.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 1"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00001.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00001.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00001.txt ---
Reputation and Anonymity
Roger Dingledine
The Free Haven Project
http://freehaven.net/
--- NEW FILE: mgp00002.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00002.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00001.html>[<prev]</A> <A HREF=mgp00003.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 2: Overview<BR>
<HR>
<IMG SRC="mgp00002.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 2"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00002.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00002.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00002.txt ---
Overview
Background on anonymity (economics)
The problem: reliability
Background on reputation
Why reputation isn't the silver bullet
Lessons learned, example systems
Open problems
--- NEW FILE: mgp00003.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00003.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00002.html>[<prev]</A> <A HREF=mgp00004.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 3: What do I mean by anonymity?<BR>
<HR>
<IMG SRC="mgp00003.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 3"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00003.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00003.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00003.txt ---
What do I mean by anonymity?
We want to prevent an adversary from linking
sender to receiver
sender to message
publisher to reader
Even an adversary who can watch a lot of the network, watch the sender, run nodes, etc
Generally done by using multiple nodes for a transaction
Not steganography, not just leaving your name off
--- NEW FILE: mgp00004.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00004.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00003.html>[<prev]</A> <A HREF=mgp00005.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 4: Many people need anonymity<BR>
<HR>
<IMG SRC="mgp00004.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 4"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00004.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00004.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00004.txt ---
Many people need anonymity
Individuals are tracked and profiled daily
Imagine your dossier in twenty years
(If that doesn't scare you, think of your kids)
Political dissidents in oppressive countries
Governments want to do operations secretly
Corporations vulnerable to traffic analysis:
VPNs, encryption don't block corporate espionage
--- NEW FILE: mgp00005.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00005.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00004.html>[<prev]</A> <A HREF=mgp00006.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 5: Anonymity is at odds with usability<BR>
<HR>
<IMG SRC="mgp00005.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 5"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00005.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00005.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00005.txt ---
Anonymity is at odds with usability
Anonymity requires inefficiencies in computation, bandwidth, storage
Unlike encryption, it's not enough for just one person to want anonymity: the infrastructure must participate
--- NEW FILE: mgp00006.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00006.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00005.html>[<prev]</A> <A HREF=mgp00007.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 6: Hide users with users<BR>
<HR>
<IMG SRC="mgp00006.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 6"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00006.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00006.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00006.txt ---
Hide users with users
Anonymity systems use messages to hide messages (the more noise, the more anonymous something in that noise is)
Senders are consumers of anonymity, and providers of the cover traffic that creates anonymity for others
Users might be better off on crowded systems, even if those systems have weaker anonymity
designs
--- NEW FILE: mgp00007.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00007.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00006.html>[<prev]</A> <A HREF=mgp00008.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 7: Strong anonymity requires distributed trust<BR>
<HR>
<IMG SRC="mgp00007.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 7"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00007.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00007.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00007.txt ---
Strong anonymity requires distributed trust
An anonymity system can't be just for one entity
(even a large corporation or government)
You must carry traffic for others to protect yourself
But those others don't want to trust their traffic to just one entity either
--- NEW FILE: mgp00008.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00008.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00007.html>[<prev]</A> <A HREF=mgp00009.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 8: An Economics of Anonymity<BR>
<HR>
<IMG SRC="mgp00008.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 8"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00008.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00008.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00008.txt ---
An Economics of Anonymity
Systems need cover traffic (many low-sensitivity users) to attract the high-sensitivity users
Most users do not value anonymity much
Weak security (fast system) can mean more users
which can mean stronger anonymity
High-sensitivity agents have incentive to run nodes
so they can be certain first node in their path is good
to attract cover traffic for their messages
There can be an optimal level of free-riding
--- NEW FILE: mgp00009.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00009.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00008.html>[<prev]</A> <A HREF=mgp00010.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 9: Reliability is critical for anonymity systems<BR>
<HR>
<IMG SRC="mgp00009.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 9"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00009.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00009.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00009.txt ---
Reliability is critical for anonymity systems
Traditional accountability (eg contract) doesn't work
Since we don't know full network state, transactions tend to be unreliable
With many nodes, each node won't interact with everybody often
Free riding, abuse, anonymity attacks
Maybe reputation can help...
--- NEW FILE: mgp00010.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00010.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00009.html>[<prev]</A> <A HREF=mgp00011.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 10: Facets of Reputation<BR>
<HR>
<IMG SRC="mgp00010.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 10"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00010.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00010.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00010.txt ---
Facets of Reputation
Reputation as a signal:
Tool to predict the future based on past behavior
Reputation as a sanction:
Tool to change the future by giving people incentive to behave well
Tool for risk management
--- NEW FILE: mgp00011.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00011.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00010.html>[<prev]</A> <A HREF=mgp00012.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 11: Reputation is problematic in anonymity systems<BR>
<HR>
<IMG SRC="mgp00011.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 11"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00011.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00011.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00011.txt ---
Reputation is problematic in anonymity systems
Attacker or freeloader can cheaply throw away bad-reputation nodes.
Hard to detect/verify a node's behavior while maintaining anonymity.
We had to redesign systems to support this!
Reputation information can be exploited to subvert anonymity...
--- NEW FILE: mgp00012.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00012.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00011.html>[<prev]</A> <A HREF=mgp00013.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 12: Reputation can be exploited<BR>
<HR>
<IMG SRC="mgp00012.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 12"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00012.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00012.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00012.txt ---
Reputation can be exploited
A node can't measure all nodes. If he measures only some, he gives away which ones he might use.
A central reputation server can give different info to different people. Must replicate and coordinate?
Adversary has incentive to get good reputation --- and discredit other nodes --- to see more traffic
Tension between giving users accurate timely information, and preventing adversary from manipulating user behavior
--- NEW FILE: mgp00013.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00013.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00012.html>[<prev]</A> <A HREF=mgp00014.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 13: Example: Free-route mix-net<BR>
<HR>
<IMG SRC="mgp00013.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 13"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00013.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00013.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00013.txt ---
Example: Free-route mix-net
Mixes write per-hop receipts to prove good service; witnesses verify and tally failure claims.
But:
Global witnesses are trust and communication bottlenecks
Owning high reputation nodes means you own more paths?
--- NEW FILE: mgp00014.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00014.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00013.html>[<prev]</A> <A HREF=mgp00015.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 14: Example: Cascade mix-net<BR>
<HR>
<IMG SRC="mgp00014.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 14"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00014.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00014.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00014.txt ---
Example: Cascade mix-net
Cascades rearrange periodically (eg daily)
A node fails its own cascade if it detects misbehavior
Nodes send test messages to monitor their cascades
Senders can demonstrate decryptions to show failure
All nodes in cascade get +1 reputation if it succeeds, -1 if it fails.
--- NEW FILE: mgp00015.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00015.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00014.html>[<prev]</A> <A HREF=mgp00016.html>[next>]</A> <A HREF=mgp00016.html>[last>>]</A>
<BR>Page 15: Example: Free Haven<BR>
<HR>
<IMG SRC="mgp00015.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 15"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00015.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00015.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00015.txt ---
Example: Free Haven
Decentralized anonymous publishing system
Publishers decide lifetime of their file
Servers trade files around (dynamic system, plausibility)
Tit for tat: I'll store your file if you'll store mine.
Hard: need reputation system to determine who will cheat
Harder: how do you verify a claim?
--- NEW FILE: mgp00016.html ---
<HTML>
<HEAD><TITLE>MagicPoint presentation foils</TITLE></HEAD>
<BODY>
<A HREF="index.html">[index]</A> <A HREF=mgp00016.txt>[text page]</A> <A HREF=mgp00001.html>[<<start]</A> <A HREF=mgp00015.html>[<prev]</A> [next>] [last>>]
<BR>Page 16: More open topics<BR>
<HR>
<IMG SRC="mgp00016.jpg" WIDTH=1024 HEIGHT=768 ALT="Page 16"><BR>
<HR>Generated by <A HREF="http://www.mew.org/mgp/";>MagicPoint</A>
</BODY></HTML>
--- NEW FILE: mgp00016.idx.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00016.jpg ---
(This appears to be a binary file; contents omitted.)
--- NEW FILE: mgp00016.txt ---
More open topics
Are dynamic p2p systems that need reliability and don't allow verifying claims doomed? Altruism, redundancy, other factors?
Can we implement reputation with currency? May allow easier decentralization.
Incentives: If anonymity for all requires each user doing similar things, how do we deal with users who don't want as much anonymity?
Do we have to abandon statistical rigor in the face of dynamic systems and adversaries?
***********************************************************************
To unsubscribe, send an e-mail to majordomo@seul.org with
unsubscribe freehaven-cvs in the body. http://freehaven.net/