{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T07:07:35Z","timestamp":1763968055738,"version":"3.41.0"},"reference-count":43,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2011,11,1]],"date-time":"2011-11-01T00:00:00Z","timestamp":1320105600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000144","name":"Division of Computer and Network Systems","doi-asserted-by":"publisher","award":["CNS-0716025"],"award-info":[{"award-number":["CNS-0716025"]}],"id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Inf. Syst. Secur."],"published-print":{"date-parts":[[2011,11]]},"abstract":"<jats:p>A network coordinate system assigns Euclidean \u201cvirtual\u201d coordinates to every node in a network to allow easy estimation of network latency between pairs of nodes that have never contacted each other. These systems have been implemented in a variety of applications, most notably the popular Vuze BitTorrent client. Zage and Nita-Rotaru (at CCS 2007) and independently, Kaafar et al. (at SIGCOMM 2007), demonstrated that several widely-cited network coordinate systems are prone to simple attacks, and proposed mechanisms to defeat these attacks using outlier detection to filter out adversarial inputs. Kaafar et al. goes a step further and requires that a fraction of the network is trusted. More recently, Sherr et al. (at USENIX ATC 2009) proposed Veracity, a distributed reputation system to secure network coordinate systems. We describe a new attack on network coordinate systems, Frog-Boiling, that defeats all of these defenses. Thus, even a system with trusted entities is still vulnerable to attacks. Moreover, having witnesses vouch for your coordinates as in Veracity does not prevent our attack. Finally, we demonstrate empirically that the Frog-Boiling attack is more disruptive than the previously known attacks: systems that attempt to reject \u201cbad\u201d inputs by statistical means or reputation cannot be used to secure a network coordinate system.<\/jats:p>","DOI":"10.1145\/2043621.2043627","type":"journal-article","created":{"date-parts":[[2011,12,6]],"date-time":"2011-12-06T19:05:23Z","timestamp":1323198323000},"page":"1-23","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["The Frog-Boiling Attack"],"prefix":"10.1145","volume":"14","author":[{"given":"Eric","family":"Chan-Tin","sequence":"first","affiliation":[{"name":"Oklahoma State University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Victor","family":"Heorhiadi","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicholas","family":"Hopper","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongdae","family":"Kim","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,11]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1011767.1011789"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1592568.1592605"},{"key":"e_1_2_1_3_1","volume-title":"http:\/\/bamboo-dht.org. (accessed","author":"Bamboo DHT","year":"2009","unstructured":"Bamboo DHT . http:\/\/bamboo-dht.org. (accessed 2009 ). Bamboo DHT. http:\/\/bamboo-dht.org. (accessed 2009)."},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"volume-title":"Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI\u201904)","author":"Bavier A.","key":"e_1_2_1_5_1","unstructured":"Bavier , A. , Bowman , M. , Chun , B. , Culler , D. , Karlin , S. , Muir , S. , Peterson , L. , Roscoe , T. , Spalink , T. , and Wawrzoniak , M . 2004. Operating system support for planetary-scale network services . In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI\u201904) . USENIX Association, Berkeley, CA, 19--19. Bavier, A., Bowman, M., Chun, B., Culler, D., Karlin, S., Muir, S., Peterson, L., Roscoe, T., Spalink, T., and Wawrzoniak, M. 2004. Operating system support for planetary-scale network services. In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI\u201904). USENIX Association, Berkeley, CA, 19--19."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1073814.1073873"},{"volume-title":"Proceedings of the International ICST Conference on Security and Privacy in Communication Networks (SecureComm).","author":"Chan-Tin E.","key":"e_1_2_1_7_1","unstructured":"Chan-Tin , E. , Feldman , D. , Kim , Y. , and Hopper , N . 2009. The frog-boiling attack: Limitations of anomaly detection for secure network coordinates . In Proceedings of the International ICST Conference on Security and Privacy in Communication Networks (SecureComm). Chan-Tin, E., Feldman, D., Kim, Y., and Hopper, N. 2009. The frog-boiling attack: Limitations of anomaly detection for secure network coordinates. In Proceedings of the International ICST Conference on Security and Privacy in Communication Networks (SecureComm)."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1402946.1403000"},{"key":"e_1_2_1_9_1","volume-title":"http:\/\/www.kimvdlinde.com\/professional\/programming\/statistics\/commonSense\/body.html. (Accessed","author":"CommonSense","year":"2008","unstructured":"CommonSense . 2008. http:\/\/www.kimvdlinde.com\/professional\/programming\/statistics\/commonSense\/body.html. (Accessed 2008 ). CommonSense. 2008. http:\/\/www.kimvdlinde.com\/professional\/programming\/statistics\/commonSense\/body.html. (Accessed 2008)."},{"volume-title":"Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS). 178--187","author":"Costa M.","key":"e_1_2_1_10_1","unstructured":"Costa , M. , Castro , M. , Rowstron , A. , and Key , P . 2004. PIC: Practical internet coordinates for distance estimation . In Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS). 178--187 . Costa, M., Castro, M., Rowstron, A., and Key, P. 2004. PIC: Practical internet coordinates for distance estimation. In Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS). 178--187."},{"volume-title":"Proceedings of the USENIX Annual Technical Conference.","author":"Cowling J.","key":"e_1_2_1_11_1","unstructured":"Cowling , J. , Ports , D. , Liskov , B. , Popa , R. A. , and Gaikwad , A . 2009. Census: Location-aware membership management for large-scale distributed systems . In Proceedings of the USENIX Annual Technical Conference. Cowling, J., Ports, D., Liskov, B., Popa, R. A., and Gaikwad, A. 2009. Census: Location-aware membership management for large-scale distributed systems. In Proceedings of the USENIX Annual Technical Conference."},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015471"},{"volume-title":"Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI). 85--98","author":"Dabek F.","key":"e_1_2_1_13_1","unstructured":"Dabek , F. , Li , J. , Sit , E. , Robertson , J. , Kaashoek , M. F. , and Morris , R . 2004b. Designing a DHT for low latency and high throughput . In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI). 85--98 . Dabek, F., Li, J., Sit, E., Robertson, J., Kaashoek, M. F., and Morris, R. 2004b. Designing a DHT for low latency and high throughput. In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI). 85--98."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1987.232894"},{"volume-title":"Revised Papers from the 1st International Workshop on Peer-to-Peer Systems (IPTPS\u201901)","author":"Douceur J. R.","key":"e_1_2_1_15_1","unstructured":"Douceur , J. R. 2002. The sybil attack . In Revised Papers from the 1st International Workshop on Peer-to-Peer Systems (IPTPS\u201901) . Springer-Verlag , 251--260. Douceur, J. R. 2002. The sybil attack. In Revised Papers from the 1st International Workshop on Peer-to-Peer Systems (IPTPS\u201901). Springer-Verlag, 251--260."},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.958323"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637203"},{"volume-title":"Proceedings of the ACM Workshop on Hot Topics in Networks.","author":"Gummadi R.","key":"e_1_2_1_18_1","unstructured":"Gummadi , R. , Govindan , R. , Kothari , N. , Karp , B. , Kim , Y. J. , and Shenker , S . 2004. Reduced state routing in the internet . In Proceedings of the ACM Workshop on Hot Topics in Networks. Gummadi, R., Govindan, R., Kothari, N., Karp, B., Kim, Y. J., and Shenker, S. 2004. Reduced state routing in the internet. In Proceedings of the ACM Workshop on Hot Topics in Networks."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1162666.1162672"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368453"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1282427.1282388"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1115\/1.3662552"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2006.79"},{"volume-title":"Proceedings of USENIX Symposium on Networked Systems Design and Implementation (NSDI\u201907)","author":"Ledlie J.","key":"e_1_2_1_24_1","unstructured":"Ledlie , J. , Gardner , P. , and Seltzer , M . 2007. Network coordinates in the wild . In Proceedings of USENIX Symposium on Networked Systems Design and Implementation (NSDI\u201907) . Ledlie, J., Gardner, P., and Seltzer, M. 2007. Network coordinates in the wild. In Proceedings of USENIX Symposium on Networked Systems Design and Implementation (NSDI\u201907)."},{"volume-title":"Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS).","author":"Ledlie J.","key":"e_1_2_1_25_1","unstructured":"Ledlie , J. , Mitzenmacher , M. , and Seltzer , M . 2007. Wired geometric routing . In Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS). Ledlie, J., Mitzenmacher, M., and Seltzer, M. 2007. Wired geometric routing. In Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS)."},{"volume-title":"Proceedings of the 3rd IEEE International Symposium on Network Computing and Applications (NCA\u201904)","author":"Lehman L.-W.","key":"e_1_2_1_26_1","unstructured":"Lehman , L.-W. and Lerman , S . 2004. Pcoord: Network position estimation using peer-to-peer measurements . In Proceedings of the 3rd IEEE International Symposium on Network Computing and Applications (NCA\u201904) . IEEE Computer Society, Los Alamitos, CA, 15--24. Lehman, L.-W. and Lerman, S. 2004. Pcoord: Network position estimation using peer-to-peer measurements. In Proceedings of the 3rd IEEE International Symposium on Network Computing and Applications (NCA\u201904). IEEE Computer Society, Los Alamitos, CA, 15--24."},{"volume-title":"Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC\u201905)","author":"Lua E. K.","key":"e_1_2_1_27_1","unstructured":"Lua , E. K. , Griffin , T. , Pias , M. , Zheng , H. , and Crowcroft , J . 2005. On the accuracy of embeddings for internet coordinate systems . In Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC\u201905) . USENIX Association, Berkeley, CA, 11. Lua, E. K., Griffin, T., Pias, M., Zheng, H., and Crowcroft, J. 2005. On the accuracy of embeddings for internet coordinate systems. In Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC\u201905). USENIX Association, Berkeley, CA, 11."},{"volume-title":"Proceedings of the ACM Workshop on Hot Topics in Networks.","author":"Lumezanu C.","key":"e_1_2_1_28_1","unstructured":"Lumezanu , C. , Levin , D. , and Spring , N . 2007. Peer wise discovery and negotiation of faster path . In Proceedings of the ACM Workshop on Hot Topics in Networks. Lumezanu, C., Levin, D., and Spring, N. 2007. Peer wise discovery and negotiation of faster path. In Proceedings of the ACM Workshop on Hot Topics in Networks."},{"volume-title":"Proceedings of the IEEE INFOCOM. 170--179","author":"Ng T. S. E.","key":"e_1_2_1_29_1","unstructured":"Ng , T. S. E. and Zhang , H . 2001. Predicting internet network distance with coordinates-based approaches . In Proceedings of the IEEE INFOCOM. 170--179 . Ng, T. S. E. and Zhang, H. 2001. Predicting internet network distance with coordinates-based approaches. In Proceedings of the IEEE INFOCOM. 170--179."},{"volume-title":"Proceedings of the USENIX Annual Technical Conference (ATEC\u201904)","author":"Ng T. S. E.","key":"e_1_2_1_30_1","unstructured":"Ng , T. S. E. and Zhang , H . 2004. A network positioning system for the internet . In Proceedings of the USENIX Annual Technical Conference (ATEC\u201904) . USENIX Association, Berkeley, CA, 11. Ng, T. S. E. and Zhang, H. 2004. A network positioning system for the internet. In Proceedings of the USENIX Annual Technical Conference (ATEC\u201904). USENIX Association, Berkeley, CA, 11."},{"volume-title":"Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS).","author":"Pias M.","key":"e_1_2_1_31_1","unstructured":"Pias , M. , Crowcroft , J. , Wilbur , S. , Harris , T. , and Bhatti , S . 2003. Lighthouses for scalable distributed location . In Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS). Pias, M., Crowcroft, J., Wilbur, S., Harris, T., and Bhatti, S. 2003. Lighthouses for scalable distributed location. In Proceedings of the International Workshop on Peer-to-Peer Systems (IPTPS)."},{"volume-title":"Proceedings of the 2nd Conference on Real, Large Distributed Systems (WORLDS\u201905)","author":"Pietzuch P.","key":"e_1_2_1_32_1","unstructured":"Pietzuch , P. , Ledlie , J. , and Seltzer , M . 2005. Supporting network coordinates on planetlab . In Proceedings of the 2nd Conference on Real, Large Distributed Systems (WORLDS\u201905) . USENIX Association, Berkeley, CA, 19--24. Pietzuch, P., Ledlie, J., and Seltzer, M. 2005. Supporting network coordinates on planetlab. In Proceedings of the 2nd Conference on Real, Large Distributed Systems (WORLDS\u201905). USENIX Association, Berkeley, CA, 19--24."},{"key":"e_1_2_1_33_1","volume-title":"http:\/\/planet-lab.org. (Accessed","author":"PlanetLab","year":"2010","unstructured":"PlanetLab . http:\/\/planet-lab.org. (Accessed 2010 ). PlanetLab. http:\/\/planet-lab.org. (Accessed 2010)."},{"key":"e_1_2_1_34_1","volume-title":"http:\/\/pyxida.sourceforge.net. (Accessed","author":"Pyxida","year":"2009","unstructured":"Pyxida . http:\/\/pyxida.sourceforge.net. (Accessed 2009 ). Pyxida. http:\/\/pyxida.sourceforge.net. (Accessed 2009)."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080102"},{"volume-title":"Proceedings of the 13th Open European Summer School and IFIP TC6.6 Conference on Dependable and Adaptable Networks and Services (EUNICE\u201907)","author":"Saucez D.","key":"e_1_2_1_36_1","unstructured":"Saucez , D. , Donnet , B. , and Bonaventure , O . 2007. A reputation-based approach for securing Vivaldi embedding system . In Proceedings of the 13th Open European Summer School and IFIP TC6.6 Conference on Dependable and Adaptable Networks and Services (EUNICE\u201907) . Springer-Verlag, Berlin, Heidelberg, 78--85. Saucez, D., Donnet, B., and Bonaventure, O. 2007. A reputation-based approach for securing Vivaldi embedding system. In Proceedings of the 13th Open European Summer School and IFIP TC6.6 Conference on Dependable and Adaptable Networks and Services (EUNICE\u201907). Springer-Verlag, Berlin, Heidelberg, 78--85."},{"volume-title":"Proceedings of the IEEE INFOCOM.","author":"Shavitt Y.","key":"e_1_2_1_37_1","unstructured":"Shavitt , Y. and Tankel , T . 2003. Big-bang simulation for embedding network distances in Euclidean space . In Proceedings of the IEEE INFOCOM. Shavitt, Y. and Tankel, T. 2003. Big-bang simulation for embedding network distances in Euclidean space. In Proceedings of the IEEE INFOCOM."},{"volume-title":"Proceedings of the USENIX Annual Technical Conference.","author":"Sherr M.","key":"e_1_2_1_38_1","unstructured":"Sherr , M. , Blaze , M. , and Loo , B. T . 2009. Veracity: Practical Secure Network Coordinates via Vote-based Agreements . In Proceedings of the USENIX Annual Technical Conference. Sherr, M., Blaze, M., and Loo, B. T. 2009. Veracity: Practical Secure Network Coordinates via Vote-based Agreements. In Proceedings of the USENIX Annual Technical Conference."},{"key":"e_1_2_1_39_1","volume-title":"http:\/\/azureus.sourceforge.net. (Accessed","author":"Vuze","year":"2010","unstructured":"Vuze . http:\/\/azureus.sourceforge.net. (Accessed 2010 ). Vuze. http:\/\/azureus.sourceforge.net. (Accessed 2010)."},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586145"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452537"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298331"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315273"}],"container-title":["ACM Transactions on Information and System Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2043621.2043627","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2043621.2043627","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:54:19Z","timestamp":1750240459000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2043621.2043627"}},"subtitle":["Limitations of Secure Network Coordinate Systems"],"short-title":[],"issued":{"date-parts":[[2011,11]]},"references-count":43,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2011,11]]}},"alternative-id":["10.1145\/2043621.2043627"],"URL":"https:\/\/doi.org\/10.1145\/2043621.2043627","relation":{},"ISSN":["1094-9224","1557-7406"],"issn-type":[{"type":"print","value":"1094-9224"},{"type":"electronic","value":"1557-7406"}],"subject":[],"published":{"date-parts":[[2011,11]]},"assertion":[{"value":"2010-12-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2011-07-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2011-11-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}