Research on the P2P Sybil attack and the detection mechanism

P2P is a full distributed network and Kad is the most popular P2P file-share system. Each node could join and leave dynamically in Kad. The S ybil attack means that any attacker could disguise as a normal node and join in the Kad network arbitrarily. By analyzing Kad protocol and its source codes, we found that Kad has several Sybil vulnerabilities. Based on this analysis, this paper designed a Sybil attack detection algorithm, DetectSybil which could performed well in Kad. It uses cluster algorithm to distinguish Sybil nodes from the whole p2p network. The experiments show that DetectSybil could detect Sybil attacks in Kad network effectively.