Turtle: Safe and Private Data Sharing

1
Turtle Safe and Private Data Sharing

• Bogdan C. Popescu
• Bruno Crispo
• Andrew S. Tanenbaum
• Petr Matejka
• Vrije Universiteit, Amsterdam

2
Motivation

• Use p2p for safe sharing of sensitive data
• Current solutions - anonymous p2p networks
• poor performance (latency throughput)
• convoluted data sharing model
• no 100 protection against legal threats
• Can we do better?

3
Solution - Turtle

• Create the P2P overlay based on social links
• Communication between links is encrypted
• Friend nodes agree on keys out-of-band
• Both queries and results go hop-by-hop

Data exchanged only between trusted parties!
4
Turtle
5
Security properties

• Only trusted and authenticated partiescan
  interact
• Each node is its own trust root
• Interesting security properties
• Node compromise causes localized damage
• Immune to Sybil and Eclipse attack
• Good protection against DoS attacks

6
Current Status

• Prototype Turtle client software available
• designed as a plug-in for the GiFT p2p daemon
• http//sourceforge.net/projects/turtle-p2p/
• Working on
• limiting bandwidth waste due to query flooding
• testbed for simulating large Turtle networks

7
Thank you! Questions?