Professional Documents
Culture Documents
10 1 1 130 6088
10 1 1 130 6088
Jean-Pierre Hubaux
Levente Buttyan
Srdan Capkun
ABSTRACT
4"57698(:<;=:?><@A><8$:?B*CD5FEHGI5FJLKNMN>O8FPDCL5QBOEL>R&ST5U:?VQ@WC8U@XJ>><EY6Z5U[
1.
j{CL>:?INTRODUCTION
><B>EQR=CK @R?5U:A^O5U6.R?C>piE R?>c:?EL>R8UEPO5U6mB>MNMN\LMu8$:'EL>R&ST5U:?VQ@
146
+ ,-.0/123
2.
p&EWR?CLKNTHREATS
@{@A>BR?K 5FE;LST>=SqKNMNMlP"><@ABc:?KNJ>R?C>}Gh5F@RqKNGh]5U:AR*8UE RTR?C":?><8$R?@
2.1
E5QP"><@n5$6xB5FEQef>EQR?K 5Fof
E8UMqthe
r9SqK :?basic
>MNKNEL>$t1ELmechanisms
>cRiST5U:?VQ@;EL5QPL>@n5U6
ELMNKNVf>wVulnerabilities
= &48,/#>?'@1A78$#,/.<'@.18$:?>1Gh5U:?>=e"\LMNEL>:*8$JMN>=KNEd8FPXCL5 B1E>cRA[
ST5U:?VQ@TR?C8UEIKNEB<5FEQef>EQR?K 5FE8UME>cRiST5U:AV"@TJ>B<8U\@A>}KNEW8FPICL5 BE>cRA[
ST5U:?VQ@q>(8UB*CyP"><eQKNB>18$BR?@x8U@x8n:?>Mu8<^fa.jTCKN@qGh><8UE@;"6Z5U:x>cL8UGI]LMN>U;
R?C8$R28UE'8FP"ef>:A@?8$:A^SqCL5}CLK A8UB*VQ@8UE8FP1C5 BmEL5QPL>mB5F\LMuP1]8$:*8UM ^"v>
R?C>h><E R?K :?>IEL>R&ST5U:?VOJ ^oPLKN@@A><GhKNE8$R?KNEL`X698UMN@A>I:?5F\"R?KNE`XKNEL6Z5U:AG8$[
R?KN5FE
aTHMN>@A@xP":*8UGI8$R?K BJ\"R{Gh5U:?>=@A\LJLRAMN>GI8UMNK B<KN5U\@{J>C8<e"K 5U:qKN@
E5QPL> * B ?U@A5FGh>wEL5QPL>@GI8<^XJ>nR?>GI]"R?>(PXR?5E5UR=:?>Mu8<^
]8UB*Vf>cR?@1rs>Fa `"aN;KNEX5U:?PL>c:qR?5h@A8(ef>R?CL><K :q5(SqEyJ8(RAR?>:^t} C$sa
X5U:?><5(ef>:;-Sm>(8UVQEL><@A@A>@'KNEgR?CL>I]":?5UR?5 B5FMN@'B<8UE7J>h>cL]LMN5FK R?>(PgR?5
]>:6Z5U:?G G8UM KNBKN5F\@D#1,:>47(EF&$+,/.&!3$1G2aI5U:1>L8UGh]M >F;
:?>[
@A>(8$:ABcCL>c:?@'C8<ef>w:?>B><E R?M ^g@ACL5(SqEkC5(SRACKN@nVQKNEPg5U6q8$RAR*8UB*VgB(8$E
J>1]>c:A6Z5U:?Gh><PX8U`f8UKNEL@R=I
8 HmM \>cR?5 5UR?COP"><eQKNB>w $(sa
2.2
the
piEge"K :AR?Vulnerabilities
\8$MNM ^g8UE ^OE>cRiSm5U:?V;of
R?CL>'
6Z\Esecurity
PL8UGh><E R*8UM@Amechanisms
>B<\":?K R&^OGI>B*C8$[
EKN@AGh@x:?>(z \LK :?>nR?C8$R}RAC>'\@>:?@}GI8UVf>n\@A>'5$6m8U]L]L:?5F]":?Ku8$R?>Bc:A^"]L[
R?5F`U:*8U]LCKNBXV >c^"@a_}@wGh><E R?KN5FEL><P7KNE AJ$s;TR?C>W`U5f8UM}5$68g`F5 5QP
B:A^"]"R?5F`U:*8U]LCKNBwP"><@AK `FEgKN@=R?5I:?><PL\B>B5FGI]LMN>cy]L:A5FJMN>Gh@}R?5IR?C>
]L:?5F]>c:G8UE8U`F>GI>E R8UEPg@A8$6Z>[Vf>><]LKNEL`W5U6T8I@AG8$MNM2EQ\LGwJ>:}5U6
B:A^"]"R?5F`U:*8U]LCKNBxVf>c^L@a2j{CLKN@T5FJQ>BcR?KNef>}KN@TPLK hB<\LM RmR?58UBB5FGI]LMNKN@C
KNE8UE8FP_C5 ByEL>R&ST5U:?VrsKNE_SqCK B*CR?C>dP"K
>c:?>EQRhEL5QPL>@IGh5$ef>
8$:?5F\EPy8UEPWKNEXSqCLKNB*CXB5FEEL><BcR?KNeQK R&^WK @}EL5URq`F\8$:?8UEQR?>><Pt*a
147
3.1
x@-8=PL>Tamper
eQKNB>TKN@.8$R2:?resistance
KN@AVn5U6J>KNEL`B<8U]LR?\":?><P'8UEPCK A8UB*Vf>(P;fK R.G\@iR
3.2
piE1Gh5FJRouting-based
K MN>m8FP=C5 B.EL>R&ST5U:?VQ@;Fmechanisms
8{MN5UR5U6Q:?><@>(8$:?B*CnC8U@lJ>><E'P">ef5UR?>(P
148
3.3
TRAR*8$BcVQNeighborhood
@1B<8UE|J>hJ8U@A><P75FEoR?C>w]":?5UR?5 B<5UMN@J>cRiST>><EkE>KN`FCQJ5U:?@c;
@\B*C|8U@nRAC>hC>MNMN5d]":?5UR?5 B5FM9a*H.^oR?CLKN@1RA><B*CELKuz \>U;28UE|8$RAR*8UB*Vf>c:
B<8UEo6Z5U:?B<>8XeQKNBcR?KNG E5QP">hR?5X\EQef><K M-]":?KNeF8$RA>PL8$R*8Q;@A\LB*C|8U@nK R?@
KNPL>EQRAK Ri^fawp&Eg698UBcR<;>ef>EkK EgR?CL>wGw\LB*CO@AKNGh]M >:nB<8U@A>h5U6TB><M MN\LMu8$:
EL>R&ST5U:?VQ@;xK E_SqCKNB*C\L@A>:?@IB<8UE_:?><M ^Y5FE_R?C>K :C5FGh>yEL>R&ST5U:?V
5F]>:*8(R?5U:qR?5]L:?5UR?>BcR{R?C>K :q]":?KNeF8UBc^ ;QG8UE ^h@A5FMN\"R?KN5FEL@xC8(ef>}J>><E
]":?5F]5F@>(P;J\LR{RAC>1]":?5FJM ><G KN@xE5UR{^ >cR{:?><8UMNM ^X@A5FMNef><Pg $9a
p&E'R?C>m60:*8$GI>cST5U:?V'5U(
6 HmMN\>cR?5 5UR?C
;fR?CL>q8U\LR?CL5U:?@25U6 $<@ACL5(S_CL5(S
RAC>'8UBcR?KNeQK R&^X5U6.8heQKNBcR?KNG~B<8UEdJ>5FJ@A>c:?ef><PyJQ^X8h@>R=5U6.P">e"K B<>@
K E@R*8$MNMN><PHK ED@iRA:*8$R?>`FKNBo]Mu8$B<>@WJ ^8UEH8$RAR*8UB*Vf>c:<a piEYR?C>O@?8$GI>
]8U]>c:<;LR?C>c^@A\`F`F>@R}8@A5FMN\"R?KN5FEdJ8U@A><PW5FEy]L@A><\PL5FE ^"GI@c2K 6R?C>
KNPL>EQRAK Ri^15U6
8}PL>e"K B<>TB*C8UE`F>@26Z5$:-><8UB*Ch@><@A@KN5FE;FR?C>EK R2J>B<5FGh>@
G\LB*CIGh5U:?>=PLK hB\M RT6Z5U:x8UEWKNE RA:?\PL>c:mR?5nRA:?8UB<>=K R?@TM 5QB<8$R?K 5FEd8UEP
K R?@8UBcR?K e"K R?KN>@a 5(Sm><ef>c:<;
RACKN@}KNEPL\LB<>@8hCK `FC>c:B5FGh]MN>c"K R&^y5U6
RAC>18FPLP":A><@A@AK E`h@AB*C>Gh><@a
3.4
Service
p68UEy8FPW
CL5 BE>cRiSmenforcement
5U:?VK @{@A><M 60[&5U:A`f8UEK v<><P
;@A>c:?eQKNB>18(eU8UKNMu8UJLKNMNK Ri^XK @
source
R2
700
695
R1
1
4
681
684
97
destination
L5U:nMu8UB*VO5U6{@]8UB>F;lST>hB<8UELE5URnPLKN@AB\@@1><8UB*Ck5U6TR?CL><@>hBc:?K RA>:?KN8Qa
> SqKNM M-8U@A@\Gh>1R?C8(R}R?CL>:A>nKN@}E5W8$\LR?CL5U:?K R&^krs5U:<;KNEO8UEO><z \KNe [
1
8UM ><E RxS{8<^f;R?C8$Rx><8UB*CdE5QPL>1KN@=K R?@}5<SqEO8U\LR?CL5U:?K R&^dP"5FG8UK Et*ST>
SqK MNM8UMN@A5I8U@A@A\LGI>=R?C8$R{R?CL>:A>KN@xE5'L">(PW@>:?ef>c:<a
98
4
681
684
4.
149
x@^"GIGh>cRA:?KNB{Vf>c^B:^L]"R?5F`U:*8U]LCQ^wK @T8UEW8$]]":?5F]L:?KN8$R?>xB<5FELB<>]LR.6Z5U:
RACKN@2B(8U@>!0<; J>B<8U\@A>{K RmPL5 >@-EL5UR2:A>(z \K :?>{5FEM KNE>TRA:A\@R?><P'@A>c:?ef>:?@ca
5(ST>ef>c:<;fR?CL>:A>TKN@28P":?8<SqJ8UB*V1:A><Mu8(R?>(P'R?5=Vf>^:?><ef5 B<8$R?KN5FE
a-jTC>
\L@A\8$MQ@B(8UMN8UJMN>{Gh>BcC8UELKN@AG RA5=8UB*CLKN>ef>.R?CK @K @R?C8$R8UE8U\"R?C5U:?K Ri^
GI8UKNE R*8UK E@8qMNKN@R5U6":?><ef5UVf>(PVf>c^"@l5FE'8q@A>:?ef>c:<;F8q@A5FMN\"R?KN5FE'BMN><8$:?M ^
EL5URI8FP8U]"R?><P|R?5k5U\L:h]L:?5FJLMN>GyaYxEY8UM R?>c:?E8(R?KNef>WST5U\MuP_J>R?5
:A>(z \>@RWRAC>d]L\JM KNBOVf>^YPLK :?>BcR?M ^Y60:?5FG K R?@W5(SqEL>:a Hm\LRIR?CK @
Sm5F\MuPnC8(ef>R?5}J>-:?><8UMNKNv><P16Z5U:>(8UB*CnEL>S7KNE R?>c:*8UBcR?KN5FE'KNEn8q@A>B\L:?>
ST8<^ ;8UEPWR?CL>:?>c6Z5U:?>1R?CL>n>cL]><BcR?><PWJ>E>cR?@q5U62R?C>18U@^"GIGh>R:?KNB
RA><B*CELKuz \>}ST5F\LMuPXJ>=MN5F@R<a
p&Eo@]K RA>h5U6.R?CKN@1P":*8SqJ8UB*V;KNEgR?CL>':?><@R15U6T5F\":'PLK @AB<\L@A@AKN5FE
;ST>
SqK MNM6Z5 B<\L@x5UEXVf>^I>@R*8UJLMNKN@ACLGI>E R{\@AK E`h8U@^"GIGh>cRA:?KNB}Vf>^IBc:A^"]L[
RA5F`U:*8U]C ^fa-piEX@A\LB*Cy8@^"@R?><GX;L><8UB*CyE5QP">1C8$@}8]L\JM KNB N$]L:?K eF8$R?>
Vf>c^_]8UK :<a -\LJM KNBdVf>^"@hB(8UEJ>OPLKN@R:?KNJ\"R?><PR?575UR?CL>c:WEL5"P"><@c;
SqCLKNMN>O]":?KNeF8$RA>yVf>^"@I@AC5F\LMuPYJ>yVf>]LRIB<5UELPL>EQR?KN8UMqR?5|KNEPLK e"KNP"[
\8UME5QPL>@a1 Bc:?\BKu8UM]L:?5UJMN>G 6Z5U:18I`FK e >EOE5QP"2
> 1 KN@=C5(SR?5
5FJ"R*8UKNEWR?C>n8$\LR?CL><E R?KNB=]\LJM KNBVf>c^W5U6-8E5QP"
> 3ha.jTC>1Gh5F@RxKNGw[
]5U:AR*8UE RqR?CL:?><8$R}KN@}8UE 9
* / f u 8$RAR*8UB*Vg A J$sa >
SqK MNMPLKN@B<\L@A@{R?CK @xK @A@A\>nK Ed4">BcR?KN5FEOfa
S{8^dR?5W\L@A>w8U@^"GIGh>cRA:?KNB'Vf>c^dBc:A^L]"R?5F@^"@R?>Gh@}6Z5U:=R?C>'RA:*8$E@[
]5U:AR5U6{R?C>h@^"GhGI>cRA:?KNBwVf>c^"@nKN@nR?5d>EBc:A^"]LR8y@^"GhGI>cRA:?K BhVf>c^
`F>EL>:*8$RA>(PDJQ^5UE>O]8$:Ri^YSqK R?CDR?C>O]L\JLMNKNBOVf>c^5U6nR?CL>o5URAC>c:
]8$:ARi^fa
x@w6Z5U:WVf>c^8U`U:A><>GI>E R<;54=K h>d8UEP >MNMNGI8UE_C8(ef>y@A\L`F`F>@R?>(P
8OR?>B*CELKuz \>W5$6
_7 6
$ 8$xJ8U@A><PY5UEY8U@^"GIGh>cRA:?KNBXVf>c^
Bc:A^"]LR?5U`U:*8U]C ^fa piER?CLKN@o8U]L]L:?5f8UB*C
;'R&ST5H]8$:AR?K ><@OS{8UE R?KNEL`YR?5
B5FGhG\ELKNB(8(R?>W@A>B<\":?>M ^_J>`FKNE_RAC>K :IKNE R?>:*8$BR?K 5FEYJQ^|>"B*C8$E`U[
K E`yr8U]]":?5F]":?Ku8$R?>M ^yB5FEL@RA:?\LBR?><PtT:*8UEPL5FG eF8UMN\L><@c;60:A5FG SqCKNB*C
J5UR?CdB<5UGI]L\LR?>nM 5 B(8UM M ^dR?C>1@?8UGI>'Vf>c^fa}jTC>'J8U@AKNB'ef>c:?@AKN5UEg]":?5U[
eQKuP"><@}]L:A5UR?><BcR?K 5FEoK EgRAC>n6Z5U:?G 5U6.@A>B:?>Bc^O5U6.R?CL>n:?><@A\LM R?K E`XVf>c^
60:A5FG ]8$@A@AKNef>'8FP"ef>:A@?8$:?KN>@a{p&Ey5U:*P">:qR?5R?C S{8$:AR=8UBcR?KNef>n8(RAR*8UB*V"@c;
@\B*Cy8U@{R?CL>1KNE RA:?\PL>c:A[KNEL[sR?CL>[GIKNPP"MN>x8$RAR*8UB*V;@A>ef>:*8UM]":?5F]5F@A8UMN@
C8(ef>xJ>><EIG8UPL>Ua-jTCL:?>>=]":?5FGhKNE>E Rm>c8$GI]LMN>@.R?C>c:?>5U68$:?>xR?C>
9 s $ U: 9 9 $w J$9; R?C> < ;M
$*?? U
P U??*
* *?*9 $ X ($9a
- 8$m8UE
jTCL>^O]":?5F]5F@>I8IS{8<^dR?5XJLKNEPyR?C>>cLB*C8UE`F><Pd:*8UEP"5FGeF8UM \>@
RA5oR?CL>XKuP"><E R?K RAKN>@5U6}R?C>W]8$:AR?K ><@aHjTC>y]":?5FJM ><G K @hRAC8$RwR?CK @
:A>(z \K :?><@K E"ef5FM e"K E`g8yRA:?\L@R?><P|]8$:AR&^rZRi^"]KNB<8UMNM ^7SqCL><E|8g`FK ef><E
]8$:ARi^KN@lKNELK R?Ku8$MNKNv>(Pn6Z5U:R?CL>-ef>c:A^L:?@RlR?KNGh>(t*apiE18x@><M 60[5U:?`f8$EKNv><P
Gh5FJLKNMN>w8FPOC5 BEL>R&ST5U:?V;
R?CLKN@}ST5F\MNPO:A>(z \K :?>'R?C8$R}R?CK @=:?5FM >hK @
]LMu8<^ ><PJ ^_8g\ELKuz \>X8U\LR?CL5U:?K R&^ rs>Ua `"aN;q8o@AK E`FM >dG8UEQ\"698UBR?\":?>c:
5U62R?CL>n@A><B\":?K Ri^XGI5QP"\MN>5U6.><8UB*CdE5QPL>(t*ST>'B5FE@AKNPL>c:=RAC8$RqR?CK @
4.1
authority
piEg AC$s;Emulation
R?CL>8U\"R?C5U:A@q]"of
:?5F]a5F@certification
>18'Vf>c^GI8UE8U`U><Gh
><E RT@A>c:?eQKNB>F;P"KN@[
RA:?KNJL\LR?><P5(ef>:q8nB>:R*8UKNEXEQ\LGwJ>:.5U6E5QPL>@TB<8UMNMN><PO ?
f? ?a{jTC>
@A>:?eQKNB>U;Q8U@-8xSqCL5FMN>U;QC8$@-8}]\JLMNK <B N$]":?KNeF8(R?>m]8UK :a-jTCL>T]\LJL[
MNKNB=Vf>^KN@{VQE5(SqEIR?58UMNMEL5"P">@TKNEWR?CL>=EL>R&ST5U:?V;"SqC>c:?><8U@TR?C>
]L:?KNeU8$R?>1Vf>c^XK @=P"KNeQKuP">(PKNE R?5
o@AC8$:?>@ 0
;5FE>@AC8$:?>
6Z5U:><8UB*Cd@A>c:?ef>:<a K 8UB*Cd@A>c:?ef>c:m8UMN@A5WC8U@}8h]L\JLMNKNB N$]L:AKNeF8$R?>1Vf>^
; 8UEPnVQEL5(Sq@RAC>T]L\JM KNBmVf>c^"@5U68UMNM"E5QPL>@a2jTCL> @A>c:?ef>c:?@
8$:?>nB*C5F@><Ey8(:?JK R:*8$:?KNM ^d8UGh5FE`'R?CL>1E5QP"><@{5U6R?C>=E>cRiSm5U:?Va
piE'5U:*P">:R?5}]L:?5UR?>BcR2K R?@A>M 6
8U`f8UK E@R2R?C>.]5UR?>EQRAKu8UMQB<5FGh]L:A5FGIK @A>m5U6
@A5FGI>'5$6mR?C> k@A>c:?ef>:?@c;R?CL>'@^"@R?><G \@A>@ / * *O U U
a-}Er
$tR?C":?><@C5FMuPB:A^"]"R?5F`U:*8U]LCQ^}@AB*C>Gh>qr ! $t
8UMNMN5<Sq@ H]8$:AR?K ><@R?5o@AC8$:?>WR?CL>y8UJK MNK R&^|R?5g]>c:A6Z5U:?G 8gBc:A^"]LR?5U[
`U:*8U]CLKNB=5F]>:?8$R?KN5FEgrs>Fa `"aN;Bc:?>(8$RAKNE`w8'P"KN`FK R?8UM@AKN`FE8$R?\L:?>(t.@A5'R?C8$R
8UEQ^ " }]8$:AR?KN>@mB<8UEh]>:6Z5U:?GR?CKN@.5F]>c:*8$R?KN5FE5FKNE R?M ^f;QSqC>c:?><8U@
K RKN@KNEL6Z><8U@AK JMN>T6Z5U:28$RGI5U@R ]8$:AR?K ><@lR?5}PL5x@A5x><ef>EnJ ^1B5FMNMN\L@AKN5FE
a
90 f
f? *& yrs@]><BK B(8$MNM ^f;8$RAR*8UB*Vf>c:?@=RAC8$R=R?><Gh]5U:*8(:?KNM ^
B<5FGh]L:A5FGIK @A>'8h@>:?ef>c:=8UEPXR?CL><EXGI5(ef>15FEyR?5wR?C>nEL>c"RxeQKNBcR?KNGt
B<5F\LMuPd]L:A5F`U:?><@@AKNef>M ^OB5FGI]":?5FGhKN@A>'8UM MR?CL>'@A>c:?ef>:?@ca=piEd5U:*P">:=R?5
R?CQST8$:ARyR?CL><@A>oVQKNEP"@y5U6h8$RAR*8UB*V;1]L:?5F8UBR?K ef>k@AB*CL><Gh>@d8$:?>o]L:?5U[
]5F@A><P
a jTCL>^|G8UVf>W\@A>y5U6' *y*0** ;TSqCK BcCY>E8$JMN>@
@A>:?ef>c:?@1R?5XB<5FGh]\"R?>E>cS@AC8$:?><@60:?5FG 5UMuPk5FEL>@nKNEoB<5FM Mu8UJ5U:*8([
R?KN5FE
;FSqK RAC5F\"R.P"KN@ABMN5F@AKNEL`=R?CL>m@A>c:?eQKNB>T]L:?K eF8$R?>mVf>c^R?5=8UE ^1@A>c:?ef>c:<a
j{CL>{E>cS_@AC8$:?>@-B5FE@RAK R?\LRA>q8=E>cS r
# $t@C8$:?K E`5$6R?C>T@>:A[
e"K B<> @x]L:?K eF8$R?>=Vf>^fa
j{CLKN@IGI>B*C8UELKN@AG B(8UEYJ>Oef>c:A^7:?5FJ\L@R8U`f8UKNEL@RX@A5F]LCK @R?KNB<8$R?><P
8$RAR*8UB*VQ@; 8$EP1KN@R?CL>:A>6Z5U:A>.ST><M M"@\K RA>(P6Z5U:GhKNMNK R*8$:A^n8$]]M KNB<8$R?KN5FEL@a
5(Sm><ef>c:<;"K Rm:?>(z \LK :?>@mR?C8$RT81@A\JL@A>cRT5U6R?C>xEL5"P">@}r9R?C>x@A>c:?ef>c:?@*t
]Mu8^d8w@A]>B<K B1:?5FM >8$R8w`FKNef>Ed]5FK EQR}KNEyR?K GI>U;8UEy\LEPL>@AK :?8UJM >
:?>(z \LK :?>GI>E R6Z5U:y@><M 60[&5U:?`F8UEKNv><PBKNeQKNMNKN8UE EL>R&ST5U:?VQ@;}KNEDSqCK B*C
>(8UB*Cy\L@A>c:}K @x>c"]>BR?><PR?5wJ>C8<ef>KNEy8ki@><M @ACLwS{8^ a
150
4.2
x@{GI>E Key
R?KN5FEL>(agreement
PKNEo $s;E5QP"><@{SqKNMNM KNE`wR?5w>@R*8UJLMNKN@ACd8@A>B<\":?>1@><@[
5. SELF-ORGANIZED PUBLIC-KEY
jTCL>O]LINFRASTRUCTURE
:?5FJLMN>G 5U6']L\JM KNBc[&Vf>c^YP"KN@RA:?K J\"R?KN5FEKNED`F>E>c:*8UM}B(8UEDJ>
5.1
and
\Gh>=R?C8$Rx
K 6-8w\Lframework
@A>c: $dJ><M KN>e >@{R?C8(R=8`FK ef><Ey]L\JLMNKNBVf>^
>n8$@A@AModel
151
subgraph of u
subgraph of v
path from u to v
,:>48<!
#"%5<>$,#8> .8E+><!F7.!%$ 71#*.5 $# #(. 0&
3$1<,* G?7+8E /,/ $5G & .5 % $ #+ %@'@5>$781,:
:& 5<, ;!%<5;&4.,:&A,:1.! #+ $ <,/1.?0& ;#
5<, F0"<7,/# <&(' $"0& % ,/# 78 '@5<>1 5;&4.O)
,:0&$G'
&0# &$ 0A. >$+7 '@& 8 /&(5<, ;!
1F&4.,:&A,:1.!< 5+!.01#(1"E G .8E>$<!+7+.9#+%1)
, F0-<7,/#+.I*<5+!.01#(1?E G?7+. 785<' &<
,/# 7'& 8 $@$# %*'1>$71,:2.8E+><!F7.!F# $
.05A<71.2 &27 <&4' 3$1'& $@0&345<0'& %*,/# 78
'5<>$1 .8E>$+7"
)(
!
*
( qr1t+-,/. r$
%"rt$ 0 %"t)20 1 * 1 $3$3465+7 9 8 :;%@8 <>? = @% ?
,!.
(
SqCL>:A>
P"><EL5UR?>@-R?C>qB<8$:*P"KNE8UM K Ri^h5U6l8@A>R<a K @A@A>EQR?KN8UMNM ^f; xr t
>c"]L:?>@A@A>@SqCLKNB*CY60:*8UBcR?KN5FEH5U61R?CL>d>"KN@RAKNE`7PLK :?><BcR?><PD]8$R?CL@KNE
B<8UEyJ>}:?>B<5FEL@RA:?\LBR?><PXK 65FELM ^WR?CL>@A\LJ`$:*8U]CL@ qr
$
t{8UEP
xr
%"tx8$:?>h8(eF8$KNMu8UJLMN>SqC>Ek8I]8$RACoJ>cR&ST><>E $78UEP!%yKN@:A>[
z \L><@R?><Pa
%
A
B
B
)
j{CL>c:?>6Z5U:A>F;R?CL>nPL>@AKN`FEd5UJ"i><BcR?KNef>@}5$6-@A\LJ`U:*8$]Cy@A>MN>BRAKN5FEg8UMN`F5U[
:?K R?CLGI@q8$:?>=R?C>=6Z5FMNMN5<SqKNE`"
* Z * $ * R?58UB*CLKN>ef>OCKN`FCD]>c:A6Z5U:?GI8UELB<>d5FERA:?\L@R
`$:*8U]CL@{R?C8$RxGI8<^I5 B<B\L:xKNEXRAC>=R?8$:?`F>cR?>(Py8$]]M KNB<8$R?KN5FE
9 9 Z
5.2
>BRR?CShortcut
8$RlRA:?\@iRl`U:*8U]Hunter
CL@lR?C8$RlGIalgorithm
8<^=5 B<B\L:KNE1@A><M 60[&5U:A`f8UEK v<><P
>.>c"]The
152
rZ6*t =
L 5wR?5@R?>]O
0
0!
aqp6
JQ;R?CL><EoB*C5 5F@A>hR?C>h><PL`F>yr
t R?CL>hR?>c:?GhK [
E8$R?KNEL`kef>c:AR?>c o5U6SqCK B*CYC8U@hR?C>yCLKN`FCL><@RIEQ\GJ>c:h5U6
5F\"R?`F5FK E`g>(P"`F>@Xr9K 6qR?C>c:?>X8$:A>W@A>ef>:?8UM{@A\B*C|><PL`U><@;-R?CL><E
B*CL5Q5U@A>n5FE>}:*8UEPL5FGhM ^t
!
"
#
!
\LE R?>:5FE
:A>(8UM L RA:?\@Rq`$:*8U]CL@qRAC8$RqST>1C8(ef>=5FJLR*8UK E><PW60:?5FG R?C>}ST><J
@K R?>@hS{S{Sa ]L`F]KZa 5U:?`8$EP|S{S{Sa B>:R<a 5U:?`"a X5U:?>y]L:?>BKN@A>M ^f;TST>
>cQRA:*8UBcR?>(P'R?CL>TMu8$:?`U><@R.@RA:?5FEL`FM ^wB5FEEL><BcR?><PB5FGh]5FEL><E R-5$6R?CL:A><>
ML O]\LJMNK B[Vf>c^1PL8$R*8UJ8U@><@; 8UEP=ST>TB<5UE@AKuP">:A>(P1R?CL><@>m@RA:?5FEL`FM ^
B5FELE>BR?><P1B5FGh]5FE>E R?@l8U@lRA:?\@R`U:*8$]CL@6Z5U:5F\":]L\L:A]5F@A>@a2jTC>
]>:A6Z5U:AG8UELB<>5U64"CL5U:AR?B\LR \E R?>:n5FE|R?CL><@A>IRA:?\@iRh`$:*8U]CL@'6Z5U:
eU8$:?KN5F\L@q@A\JL`U:*8U]CW@AKNv><@xKN@q@ACL5(SqEyKNEdKN`F\":?>nQa
5.3
>.K E"ef>@R?K `f8$R?><Pof
R?C>-Shortcut
]>:6Z5U:?G8$EBHunter
>m5U64"C5$:AR?B\LR
>.C8(efEvaluation
(
#
!
153
5.4
4Q5I698$:;Dishonest
ST>C8(ef>8U@A@A\Lusers
GI><PXR?C8$R><8UB*Cg\@A>c:K @CL5FE>@R18$EPOPL5 >@
*
( +8 r1t
/
,
7 :;8 <>=
r$
%
xr
$
%"tAt
r$
%
t
.
)0*1
;? ( +8
SxCL>c:?>
r$
%"t
r$
%
t"
J fa r 1tm:?>]L[
:?><@A>E R?@1 R?CL>w8(ef>c:*8U`F>h5U6TR?C>:*8$R?K 5F@n5U6TR?CL>h8U@A@A\L:?8UEB>I5FJ"R*8UKNEL><P
SxCL>EY5FEM ^YK EL6Z5U:AG8$R?K 5FE_60:?5FG R?CL>yMN5 B<8UM}:?>]5F@K R?5U:?K ><@KN@\L@A><P
R?5nR?C>}8U@A@A\":*8UELB<>}5FJLR*8$KNE><PISqCL><EIKNE"6Z5U:?G8(R?KN5FE6u:?5FG RAC>qSqC5FM >
RA:?\@R`U:*8U]LCoK @1\@>(Pa'p6
r 1txKN@1BMN5F@A>R?55FE>U;RAC>Eo>@A@A>EL[
R?Ku8UMNM ^R?CL>W@?8UGh>y8U@A@A\":*8UELB<>XB<8UE_J>W5FJLR*8$KNE><P\@KNE`OR?CL>WMN5 B<8UM
:?><]5F@AK R?5U:?K ><@=8U@q\@AK E`R?CL>SqC5FM >RA:?\L@Rq`U:*8U]C
a
( +8
+ J
r$ % 1t
K6 $
%
U5 R?C>c:ASqKN@A>
6.
8(ef>}@A\":?ef>^ ><PhRAC>}RACL:?><8$R?@q8UEP]5F@A@KNJM >1@A5FMN\"R?KN5FEL@{6Z5U:{R?C>
>=CCONCLUSION
154
7.
]":?><@@n5F\L:'`U:?8$R?K R?\PL>wR?5XR?CL>h@iR?\P"><E R?@'mCLKNELGI5<^4=\LRAR?8Q;
>h>"ACKNOWLEDGEMENTS
8. njTREFERENCES
CL>njl>:?GhKNEL5QPL>@ 2:?5(><BcR<aS{S{Sa R?>c:?GIK E5QP"><@a 5U:?`"a
$8 'j}ay8$R?@A\LGI5$R?5";Laj8UVF8U@CKNGI8Q;8UEP ap&G8UKZa=E
@A>>V"K E`w@AGI8$:ARq]\LJMNK B[Vf>c^WP"KN@RA:?K J\"R?KN5FEL@x@i^L@RA><Gh@a
$L c9 $w =/ ;
10*2"*L$" 3<;]8U`F><@ J4$F ;
8CF a
9 $?;
UQ F "A C ;A JJJQa
(.2a$Hm\"RARi^8U Ey8UEP"a [ a \J8$\La K E"6Z5U:?BKNE`h@A>c:?eQKNB<>
8<eF8UKNMN8UJK MNK R&^yKNEXGh5FJLKNMN>n8FPC5 B1EL>R&ST5U:?VQ@apiE *?
;A JJAJQa
AJ$'1aX><EL><v>@;4aeF8UEd}5U:?@AB*C5UR;8$EPd4a%m8UEL@R?5FE>Ua
$
?< X (mf & U * a x 2:?>@A@;l 8!8 a
P 6: ;";
U$4'a 8$RAR?@ca 9 Z
8!8!8 a
c $?a$:?KNEB>cR?5FE
EKNef>c:?@AK R&^
:?><@@;
155