P2P文件共享网络中的用户隐私泄露

User privacy exposure in P2P file-sharing networks

针对当前流行的Kad文件共享网络,在真实网络中进行相关实验,对中国用户的内容隐私泄露情况进行了系统的测量和研究。实验采用Dragonfly监测系统,能够持续监测Kad网络中与敏感关键词相关的文件共享事件,获取被共享的隐私文件元信息;然后利用隐私文件的唯一性特性,可以有效识别出用户的隐私文件,从而评估整个网络中用户的隐私泄露情况。实验结果显示:针对随机选定的10个敏感关键词,在2个星期内中国Kad用户总共共享了超过900个隐私文件。这些隐私文件分布在中国各个地区,其中将近30%来自北京,凸显了该地区用户隐私保护意识的薄弱。这些实验结果表明:该类隐私泄露已经广泛存在于Kad网络中,并对P2P用户的隐私产生了巨大的威胁。

This study investigates Chinese user ＂ content privacy ＂ exposures in Kad,one of the biggest P2Pfile sharing networks,using the monitoring system Dragonfly.Dragonfly passively monitors sharing and downloading events related to privacy-sensitive keywords in Kad that reveal meta-information in private files.The uniqueness of this data can be used to identify private files,which could then be used to deduce privacy exposures in the whole network.Tests show that within two weeks,more than nine hundred private files related to ten sensitive keywords were shared by Kad users.These private files were widely distributed all over China with about 30% coming from Beijing,which indicates a serious lack of privacy protection awareness.These results show that this privacy problem has become a serious threat for P2Pusers.