\contentsline {chapter}{List of Figures}{vi} \contentsline {chapter}{List of Tables}{vii} \contentsline {part}{I\hspace {1em}First Part}{1} \contentsline {chapter}{\numberline {1}Introduction}{2} \contentsline {chapter}{\numberline {2}Trust Metrics}{6} \contentsline {section}{\numberline {2.1}The simplest trust metric}{6} \contentsline {section}{\numberline {2.2}Survey of the literature}{7} \contentsline {section}{\numberline {2.3}Framework for analysis}{10} \contentsline {subsection}{\numberline {2.3.1}Cost metrics: node vs edge attacks}{10} \contentsline {section}{\numberline {2.4}Analysis: upper bounds}{12} \contentsline {section}{\numberline {2.5}Analysis: lower bounds}{12} \contentsline {section}{\numberline {2.6}Analysis of Maurer's trust metric}{12} \contentsline {chapter}{\numberline {3}Group Trust Metrics}{13} \contentsline {section}{\numberline {3.1}The Advogato network-flow trust metric}{14} \contentsline {section}{\numberline {3.2}Comparison with Flake's Self-Organization work}{15} \contentsline {chapter}{\numberline {4}Advogato}{17} \contentsline {section}{\numberline {4.1}Implementation overview}{17} \contentsline {section}{\numberline {4.2}Implementation details}{18} \contentsline {section}{\numberline {4.3}Experimental results}{20} \contentsline {chapter}{\numberline {5}An attack-resistant name service}{21} \contentsline {section}{\numberline {5.1}Related work}{22} \contentsline {section}{\numberline {5.2}Policy language}{24} \contentsline {section}{\numberline {5.3}Implementation of naming service}{27} \contentsline {subsection}{\numberline {5.3.1}Responsible servers}{28} \contentsline {subsection}{\numberline {5.3.2}Mutation requests}{29} \contentsline {subsection}{\numberline {5.3.3}Query requests}{29} \contentsline {subsection}{\numberline {5.3.4}Security analysis}{30} \contentsline {chapter}{\numberline {6}Attack-Resistant Metadata}{32} \contentsline {section}{\numberline {6.1}Brief analysis of PageRank}{33} \contentsline {subsection}{\numberline {6.1.1}Recap of PageRank}{33} \contentsline {subsection}{\numberline {6.1.2}Attack-resistance of PageRank}{34} \contentsline {subsection}{\numberline {6.1.3}Significance of initial vector and walk length}{35} \contentsline {section}{\numberline {6.2}What makes a trust metric attack resistant?}{37} \contentsline {section}{\numberline {6.3}Generalized metadata}{38} \contentsline {section}{\numberline {6.4}Distributed network model}{39} \contentsline {chapter}{\numberline {7}Stamp Trading Networks}{41} \contentsline {section}{\numberline {7.1}Stamps}{42} \contentsline {subsection}{\numberline {7.1.1}Stamp trading}{44} \contentsline {section}{\numberline {7.2}Attacks on the stamp trading network}{46} \contentsline {section}{\numberline {7.3}Exchange rate policy}{47} \contentsline {section}{\numberline {7.4}Applications}{48} \contentsline {section}{\numberline {7.5}Open questions}{48} \contentsline {chapter}{Bibliography}{50}