TWC: Small: Towards Robust Crowd Computations

TWC：小型：迈向稳健的群体计算

• 批准号: 1421444
• 负责人: Alan Mislove
• 金额: $ 45万
• 依托单位: Northeastern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2017-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1421444&HistoricalAwards=false
• 关键词: TWC; Small; Towards; Robust; Crowd

This research explores a new approach to securing systems that are based on crowd computations, where the operator polls the opinions of crowds--arbitrary users of the system--to provide a variety of recommendation services. Examples include services like Yelp, YouTube, Twitter, and TripAdvisor. However, today's services are known to suffer from multiple identity (Sybil) attacks, where an attacker creates many identities to subvert the system (e.g., make their business appear to be more popular on Yelp). Previous approaches have investigated detecting whether a single identity is likely to be fake, but these techniques suffer from a number of drawbacks in practice, as attackers are often able to create many fake accounts or leverage existing black-markets for fake or compromised accounts. Instead, the PI is investigating an approach that shifts Sybil defense away from individual Sybil identity detection and towards directly detecting manipulation of large crowd computations themselves. In essence, the PI is shifting the problem from detecting whether a single identity is fake to detecting whether a set of identities are fake, the latter of which is likely to be significantly easier for the operator. If successful, the approach could tip the scales back in favor of the operator, preventing manipulation from attackers using fake, colluding, and compromised users in a variety of systems.

这项研究探索了一种新的方法来保护基于人群计算的系统，其中操作员轮询人群的意见-系统的任意用户-以提供各种推荐服务。 例如Yelp、YouTube、Twitter和TripAdvisor等服务。 然而，已知当今的服务遭受多身份（Sybil）攻击，其中攻击者创建许多身份来破坏系统（例如，使他们的业务在Yelp上更受欢迎）。 以前的方法已经研究了检测单个身份是否可能是假的，但这些技术在实践中存在许多缺点，因为攻击者通常能够创建许多假帐户或利用现有的黑市来获取假帐户或受损帐户。 相反，PI正在研究一种方法，将Sybil防御从个人Sybil身份检测转移到直接检测大型人群计算本身的操纵。 从本质上讲，PI将问题从检测单个身份是否是假的转移到检测一组身份是否是假的，后者对操作员来说可能更容易。 如果成功的话，这种方法可以使天平向有利于操作员的方向倾斜，防止攻击者在各种系统中使用虚假，串通和受损的用户进行操纵。