NeTS:Small: Mapping, Attacking and Defending the BitTorrent Ecosystem

BitTorrent生态系统包括数百万的BitTorrent同伴，数百个活跃的跟踪器和数十个独立运营的torrent发现站点。生态系统通过使用分布式哈希表（DHT）和对等交换（PEX）功能的分布式跟踪器进一步推动。生态系统还包括？“拦截公司”，试图限制目标内容的传播。尽管它很重要，就其在互联网上的足迹和对新兴P2P应用程序的影响而言，BitTorrent生态系统今天只被部分理解。许多社区（包括P2P研究人员和开发人员，ISP研究人员和工程师，版权所有者和执法机构）都希望对BitTorrent生态系统有一个全面而深入的了解，以及未来绘制生态系统的工具。在此背景下，PI及其研究生正在探索两个相互关联的研究方向。首先，他们正在开发工具和方法来全面探索和绘制整个BitTorrent生态系统。其次，他们正在研究如何攻击和保护生态系统。对地图研究的预期结果包括：新的公共领域工具和方法用于绘制和分析生态系统；一个全面的地图数据集，它将比任何现有数据集大一个数量级以上，并将基本上涵盖公共生态系统中的所有追踪者和同行；基于重要性抽样的新型估计方法，结合了来自集中式和分布式跟踪器的测量样本。对BitTorrent攻击/防御研究的预期结果包括：正在进行的攻击的测量和评估方法？禁止公司”;深入研究种子攻击，即攻击者试图阻止初始种子将文件分发到生态系统中；用于防御BitTorrent污染攻击的机器学习算法；和易于处理的确定性和随机模型的BitTorrent攻击的动态，提供关键的洞察到BitTorrent漏洞。

The BitTorrent Ecosystem includes millions of BitTorrent peers, hundreds of active trackers, and dozens of independently-operated torrent discovery sites. The Ecosystem is further fueled with distributed trackers using Distributed Hash Table (DHT) and Peer Exchange (PEX) functionality. The Ecosystem also includes ?interdiction companies," which attempt to curtail the distribution of targeted content.Despite its importance, both in terms of its footprint in the Internet and the influence it has on emerging P2P applications, the BitTorrent Ecosystem is only partially understood today. Many communities (including P2P researchers and developers, ISP researchers and engineers, copyright holders, and law enforcement agencies) would like to have a comprehensive and in-depth understanding of the BitTorrent Ecosystem, as well as tools for mapping the Ecosystem in the future.In this context, the PI and his graduate students are exploring two inter-related research directions. First, they are developing tools and methodologies for comprehensive exploration and mapping of the entire BitTorrent Ecosystem. Second, they are examining of how the Ecosystem can be attacked and defended. The expected results for the mapping research include: new public-domain tools and methodologies for mapping and analyzing the Ecosystem; a comprehensive mapping data set, which will be more than an order of magnitude larger than any existing data set and will essentially cover all trackers and peers in the public Ecosystem; novel estimation methodologies based on importance sampling, incorporating measurement samples from both centralized and distributed trackers.The expected results for the BitTorrent attack/defense research include: measurement and evaluation methodologies of ongoing attacks from ?interdiction companies"; an in-depth study of the seed attack, whereby the attackers attempt to prevent the initial seed from distributing the file into the Ecosystem; machine learning algorithms for defending against the pollution attack in BitTorrent; and tractable deterministic and stochastic models for the dynamics of BitTorrent attacks, providing critical insight into BitTorrent vulnerabilities.