Eclipse Attacks on Overlay Networks: Threats and Defenses

Abstract— Overlay networks are widely used to deploy functionality at edge nodes without changing network routers. Each node in an overlay network maintains connections with a number of peers, forming a graph upon which a distributed application or service is implemented. In an “Eclipse” attack, a set of malicious, colluding overlay nodes arranges for a correct node to peer only with members of the coalition. If successful, the attacker can mediate most or all communication to and from the victim. Furthermore, by supplying biased neighbor information during normal overlay maintenance, a modest number of malicious nodes can eclipse a large number of correct victim nodes. This paper studies the impact of Eclipse attacks on structured overlays and shows the limitations of known defenses. We then present the design, implementation, and evaluation of a new defense, in which nodes anonymously audit each other’s connectivity. The key observation is that a node that mounts an Eclipse a...

• Type: Conference
• Year: 2006
• Where: INFOCOM
• Authors: Atul Singh, Tsuen-Wan Ngan, Peter Druschel, Dan S. Wallach
• Keywords: Communications, Eclipse Attacks, INFOCOM 2006, Node, Overlay Network