%0 Conference Proceedings %T The Reputation Lag Attack %+ University of Oxford %+ University of Nottingham, UK (UON) %A Sirur, Sean %A Muller, Tim %< avec comité de lecture %( IFIP Advances in Information and Communication Technology %B 13th IFIP International Conference on Trust Management (IFIPTM) %C Copenhagen, Denmark %Y Weizhi Meng %Y Piotr Cofta %Y Christian Damsgaard Jensen %Y Tyrone Grandison %I Springer International Publishing %3 Trust Management XIII %V AICT-563 %P 39-56 %8 2019-07-17 %D 2019 %R 10.1007/978-3-030-33716-2_4 %K Reputation lag %K Reputation %K Trust system %K Attack %K Malicious peer %Z Computer Science [cs]Conference papers %X Reputation systems and distributed networks are increasingly common. Examples are electronic marketplaces, IoT and ad-hoc networks. The propagation of information through such networks may suffer delays due to, e.g., network connectivity, slow reporting and rating-update delays. It is known that these delays enable an attack called the reputation lag attack. There is evidence of impact of reputation lag attacks on existing trust system proposals. There has not been in-depth formal analysis of the reputation lag attack. Here, we present a formal model capturing the core properties of the attack: firstly, the reputation of an actor failing to reflect their behaviour due to lag and, secondly, a malicious actor exploiting this for their personal gain. This model is then used to prove three key properties of the system and the attacker: if there is no decay of reputation, then the worst-case attacker behaviour is to cooperate initially, then wait, then behave badly; increasing communication between users was found to always be of benefit to the users; performing a specified number of negative interactions given any instance of the system is an NP-hard problem. %G English %Z TC 11 %Z WG 11.11 %2 https://inria.hal.science/hal-03182604/document %2 https://inria.hal.science/hal-03182604/file/491176_1_En_4_Chapter.pdf %L hal-03182604 %U https://inria.hal.science/hal-03182604 %~ IFIP %~ IFIP-AICT %~ IFIP-TC %~ IFIP-TC11 %~ IFIP-TM %~ IFIP-WG11-11 %~ IFIP-AICT-563