652 |
|
|
653 |
We have also presented the Storm data model, a simple |
We have also presented the Storm data model, a simple |
654 |
model for representing data published on the P2P Web. |
model for representing data published on the P2P Web. |
655 |
The Storm model and allows powerful abstractions to be built on top of it |
Storm has a simple plug-in architecture for indexing files |
656 |
(such as pointer records), and |
by content. This allows powerful abstractions to be built on top of it |
657 |
is easy to implement in a variety |
(such as pointer records). |
658 |
|
|
659 |
|
The model is easy to implement in a variety |
660 |
of ways on current systems, ranging |
of ways on current systems, ranging |
661 |
from filesharing systems to global persistent data stores |
from filesharing systems to global persistent data stores |
662 |
like as OceanStore to |
like as OceanStore to |
663 |
simply burning blocks on a CD and using SneakerNet |
simply burning blocks on a CD and using SneakerNet |
664 |
for file transfers. |
for file transfers. |
665 |
|
|
666 |
An adversary may try to attack our system by trying |
.. Shared 1:1 with other P2P systems-- not that important |
667 |
to publish such a large amount of information |
to discuss: |
|
that it overloads the P2P network used. This |
|
|
a problem shared with other P2P applications. |
|
668 |
|
|
669 |
An adversary may also use an information hiding attack, |
An adversary may try to attack our system by trying |
670 |
withholding new versions of documents to clients, |
to publish such a large amount of information |
671 |
|
that it overloads the P2P network used. This |
672 |
|
a problem shared with other P2P applications. |
673 |
|
|
674 |
|
An adversary may attempt to use an information hiding attack |
675 |
|
against our system, |
676 |
|
withholding new versions of documents from clients, |
677 |
making them believe that old versions are still current. |
making them believe that old versions are still current. |
678 |
It could be argued that this is more of a problem |
It could be argued that this is more of a problem |
679 |
than an information-hiding attack in a filesharing system, |
than an information-hiding attack in a filesharing system, |
682 |
is less visible. Thus, if possible, the underlying P2P network |
is less visible. Thus, if possible, the underlying P2P network |
683 |
used should try to protect against information hiding attacks. |
used should try to protect against information hiding attacks. |
684 |
|
|
685 |
|
Also, there may be privacy concerns with exposing one's cache |
686 |
|
on the network, as well as retrieving files from peers |
687 |
|
(because they can then see what one is trying to download). |
688 |
|
One way to counter this problem is to use an anonymizing |
689 |
|
P2P overlay. |
690 |
|
|
691 |
While our system helps to keep documents alive after |
While our system helps to keep documents alive after |
692 |
the original publisher has lost interest in them, it |
the original publisher has lost interest in them, it |
693 |
does not protect against a publisher that wants to make |
does not protect against a publisher that wants to make |
708 |
|
|
709 |
We would like to thank Toni Alatalo, |Hermanni|, |
We would like to thank Toni Alatalo, |Hermanni|, |
710 |
Antti-Juhani Kaijanaho (who also proposed the name Storm), |
Antti-Juhani Kaijanaho (who also proposed the name Storm), |
711 |
Matti Katila, and Janne Kujala for comments and discussions. |
Matti Katila, Janne Kujala and Sarah Stehlig for comments and discussions. |
712 |
|
|
713 |
.. XXX who else |
.. XXX who else |
714 |
|
|