Talk:DistOS-2011W Justice - Revision history

Mike Preston: /* Implementation Section Notes */

2011-03-28T03:03:44Z

Implementation Section Notes

← Older revision		Revision as of 03:03, 28 March 2011
Line 186:		Line 186:

	'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''		'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''

			==Components Necessary for a Distributed Computer Justice System==

			===Reporting System===
			* needs to be limited so that it can not be spammed....maybe only a certain number of reports can be logged per day, per hour, etc.
			* all users need to be able to report a crime based on the known laws of the distributed system.

			===Evidence Logging System===

			===Morality Reputation (Rap Sheet)===



	=== Local Implementation ===		=== Local Implementation ===

Cha0s: /* Local Implementation */

2011-03-22T16:03:52Z

Local Implementation

← Older revision		Revision as of 16:03, 22 March 2011
Line 197:		Line 197:
	* network designed for prevention of outside attackers, instead of within.		* network designed for prevention of outside attackers, instead of within.

			*http://delivery.acm.org/10.1145/360000/356846/p185-bernstein.pdf?key1=356846&key2=3639080031&coll=DL&dl=ACM&ip=134.117.254.250&CFID=14736879&CFTOKEN=22326715
			**Paper discussing ways to handle a distributed database in this sort of setup.

	===Comment Spam===		===Comment Spam===

Cha0s: /* Implementation Section Notes */

2011-03-22T15:50:50Z

Implementation Section Notes

← Older revision		Revision as of 15:50, 22 March 2011
Line 186:		Line 186:

	'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''		'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''

			=== Local Implementation ===

			* Each implementation stores an encrypted log of accesses.
			* Using statistics (as described in the network criminology) to create evidence logs to detect such things as DDoS.
			* A leader or group of leaders stores a master list of offenders, using the same style of moral rating.
			* The master list is propagated to nodes within the network, each website using the moral rating in a default or custom manner.
			* Network is used specifically for providers of services. Members of the network can provide shared services based on the network configuration (outside of our scope).
			* The leader or group of leaders would gather evidence logs when an offense is made, and update the master list.
			* network designed for prevention of outside attackers, instead of within.

Dbarrera: /* Denial of Service */

2011-03-20T21:06:15Z

Denial of Service

← Older revision		Revision as of 21:06, 20 March 2011
Line 208:		Line 208:
	*if a certain percent of the traffic originates from a single ID (say 60%), then a DoS has occurred.		*if a certain percent of the traffic originates from a single ID (say 60%), then a DoS has occurred.
	*only the computer conducting the DoS is penalized.		*only the computer conducting the DoS is penalized.
			<u>Current solutions</u>
			*Blacklists - Don't allow incoming connections from specific IP addresses
			*Routing/configuration - Ingress filtering, ACL, firewalls, syn-cookies
			*Dynamic over-provisioning - When you detect a surge in traffic (legitimate or attack), increase the amount of bandwidth available.
			*Null routing - Refuse to route traffic being sent to the victim for a period of time (upstream)

	===Phishing===		===Phishing===
	Send the original website link as well as the phishing site link in the report so that the investigating computer can compare.		Send the original website link as well as the phishing site link in the report so that the investigating computer can compare.

Dbarrera: /* Implementation Section Notes */

2011-03-20T21:00:08Z

Implementation Section Notes

← Older revision		Revision as of 21:00, 20 March 2011
Line 183:		Line 183:
	'''Website administrators will limit site usage based on the morality/reputation rating.'''		'''Website administrators will limit site usage based on the morality/reputation rating.'''

	'''Morality history.''' - The current morality value is useful for quick validation. More complicated scenarios (e.g., buying something from ebay) might merit a more detailed explanation of why a computer has a particular morality value.		'''Morality history.''' - The current morality value is useful for quick validation. More complicated scenarios (e.g., buying something from ebay) might merit a more detailed explanation of why a computer has a particular morality value, so it should be possible to see the history.

	'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''		'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''

Dbarrera: /* Implementation Section Notes */

2011-03-20T20:59:11Z

Implementation Section Notes

← Older revision		Revision as of 20:59, 20 March 2011
Line 177:		Line 177:
	==Implementation Section Notes==		==Implementation Section Notes==

	~~<b>~~All computers have a unique ID.		'''All computers have a unique ID''' -

	There exists some form of morality reputation that is public knowledge.		'''There exists some form of morality reputation that is public knowledge.''' - It should be clear to everyone how you can lose morality. There should also be a clear process to follow in case of disputes.

	Website administrators will limit site usage based on the morality/reputation rating.		'''Website administrators will limit site usage based on the morality/reputation rating.'''

			'''Morality history.''' - The current morality value is useful for quick validation. More complicated scenarios (e.g., buying something from ebay) might merit a more detailed explanation of why a computer has a particular morality value.

			'''Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.'''

	~~Laws should be posted so that everyone can see what actions will reduce their morality rating.~~

	~~Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.</b>~~

Dbarrera: /* Comment Spam */

2011-03-20T20:27:59Z

Comment Spam

← Older revision		Revision as of 20:27, 20 March 2011
Line 199:		Line 199:
	*has access to the transaction/communication data of the perpetrating computer.		*has access to the transaction/communication data of the perpetrating computer.
	*compares the reported message to other ommunications to detect if spam has occurred.		*compares the reported message to other ommunications to detect if spam has occurred.
			<u>Currently deployed solutions</u>
			*CAPTCHAS - try to detect if the comment submission came from a human or a bot.
			*Filtering - scan for and block specific keywords (pharmaceutical terms, porn terms, etc)
			*Rate limiting - only allow N comments in X time from the same source.

	===Denial of Service===		===Denial of Service===

Mike Preston: /* Implementation Section Notes */

2011-03-17T19:38:03Z

Implementation Section Notes

← Older revision		Revision as of 19:38, 17 March 2011
Line 186:		Line 186:

	Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.</b>		Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.</b>


	===Comment Spam===		===Comment Spam===

Mike Preston: /* Implementation Section Notes */

2011-03-17T19:37:52Z

Implementation Section Notes

← Older revision		Revision as of 19:37, 17 March 2011
Line 186:		Line 186:

	Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.</b>		Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.</b>


	===Comment Spam===		===Comment Spam===
Line 199:		Line 198:
	*has access to the transaction/communication data of the perpetrating computer.		*has access to the transaction/communication data of the perpetrating computer.
	*compares the reported message to other ommunications to detect if spam has occurred.		*compares the reported message to other ommunications to detect if spam has occurred.


	===Denial of Service===		===Denial of Service===

Mike Preston: /* Implementation Section Notes */

2011-03-17T19:37:36Z

Implementation Section Notes

← Older revision		Revision as of 19:37, 17 March 2011
Line 177:		Line 177:
	==Implementation Section Notes==		==Implementation Section Notes==

	<b>All computers have a unique ID.~~</b>~~		<b>All computers have a unique ID.

	~~<b>~~There exists some form of morality reputation that is public knowledge.~~</b>~~		There exists some form of morality reputation that is public knowledge.

	~~<b>~~Website administrators will limit site usage based on the morality/reputation rating.</b>		Website administrators will limit site usage based on the morality/reputation rating.

			Laws should be posted so that everyone can see what actions will reduce their morality rating.

			Website administrators will determine what restrictions are imposed on a website based on morality ratings. Different sites may have different penalties based on their own rules.</b>


Line 198:		Line 202:

	===Denial of Service===		===Denial of Service===
			Use the unique ID to trace back all traffic from the DoS attack to originating machines.
			*if a certain percent of the traffic originates from a single ID (say 60%), then a DoS has occurred.
			*only the computer conducting the DoS is penalized.

			===Phishing===
			Send the original website link as well as the phishing site link in the report so that the investigating computer can compare.