On Sybil-proofness in Restaking Networks
- URL: http://arxiv.org/abs/2509.18338v1
- Date: Mon, 22 Sep 2025 19:01:26 GMT
- Title: On Sybil-proofness in Restaking Networks
- Abstract summary: Restaking protocols expand validator responsibilities beyond consensus, but their security depends on resistance to Sybil attacks.<n>We introduce a formal framework for Sybil-proofness in restaking networks, distinguishing between two types of attacks.<n>We analyze marginal and multiplicative slashing mechanisms and characterize the conditions under which each deters Sybil strategies.
- Score: 1.8925617030516928
- License: http://creativecommons.org/licenses/by/4.0/
- Abstract: Restaking protocols expand validator responsibilities beyond consensus, but their security depends on resistance to Sybil attacks. We introduce a formal framework for Sybil-proofness in restaking networks, distinguishing between two types of attacks, one in which other Sybil identities are kept out of an attack and one where multiple Sybil identities attack. We analyze marginal and multiplicative slashing mechanisms and characterize the conditions under which each deters Sybil strategies. We then prove an impossibility theorem: no slashing mechanism can simultaneously prevent both attack types. Finally, we study the impact of network structure through random graph models: while Erd\"os-R\'enyi networks remain Sybil-proof, even minimal heterogeneity in a two-block stochastic block model makes Sybil attacks profitable. These results reveal fundamental limits of mechanism design for restaking and highlight the critical role of network topology.
Related papers
- RobResilience: Implementing and Evaluating a Resilience Framework for Cyber-Physical Embodied Systems [15.203157475329201]
In embodied cyber-physical systems, active cyberattacks pose an immediate threat not just to data, but to physical integrity and human safety.<n>Existing security approaches excel at detection, but lack the runtime mechanisms to determine whether a disruption is tolerable or if performance degradation remains within safe operational bounds.<n>This paper presents RobResilience, an implementation of a formal resilience framework for embodied cyber-physical systems in a Webots simulation environment.
arXiv Detail & Related papers (2026-09-15T15:49:04Z) - Defending Network Intrusion Detection Systems Based on Graph Neural Networks Against Structural Adversarial Attacks [3.444915014411325]
Graph Neural Networks (GNNs) represent a promising solution for Machine Learning (ML) based Network Intrusion Detection Systems (NIDS)<n>GNNs remain vulnerable to structural adversarial attacks, where an attacker perturbs the underlying network graph topology by injecting edges or inserting nodes.<n>We propose a defense framework based on adversarial training to strengthen GNN-based NIDS against structural attacks.
arXiv Detail & Related papers (2026-08-25T12:06:12Z) - Exploiting Edge Features for Transferable Adversarial Attacks in Distributed Machine Learning [54.26807397329468]
This work explores a previously overlooked vulnerability in distributed deep learning systems.<n>An adversary who intercepts the intermediate features transmitted between them can still pose a serious threat.<n>We propose an exploitation strategy specifically designed for distributed settings.
arXiv Detail & Related papers (2025-07-09T20:09:00Z) - The Relationship Between Network Similarity and Transferability of Adversarial Attacks [0.0]
We find a correlation between a large number of Convolutional Neural Networks (CNNs) and adversarial attacks.<n> Layer similarity was highest for consistent, basic layers such as DataParallel, Dropout and Conv2d.<n>A DecisionTreeRegressor can predict the success rate of transferred attacks with an accuracy of over 90%.
arXiv Detail & Related papers (2025-01-27T17:07:00Z) - An Attentive Graph Agent for Topology-Adaptive Cyber Defence [1.0812794909131096]
We develop a custom version of the Cyber Operations Research Gym (CybORG) environment, encoding network state as a directed graph.<n>We employ a Graph Attention Network (GAT) architecture to process node, edge, and global features, and adapt its output to be compatible with policy gradient methods in reinforcement learning.<n>We demonstrate that GAT defensive policies can be trained using our low-level directed graph observations, even when unexpected connections arise during simulation.
arXiv Detail & Related papers (2025-01-24T18:22:37Z) - Sybil Detection using Graph Neural Networks [20.706469085872516]
This paper presents SYBILGAT, a novel approach to Sybil detection in social networks using Graph Attention Networks (GATs)
Our proposed method addresses limitations by dynamically assigning attention weights to different nodes during aggregations, enhancing detection performance.
We successfully applied the model to a real-world Twitter graph with more than 269k nodes and 6.8M edges.
arXiv Detail & Related papers (2024-09-13T08:35:28Z) - Problem space structural adversarial attacks for Network Intrusion Detection Systems based on Graph Neural Networks [8.629862888374243]
We propose the first formalization of adversarial attacks specifically tailored for GNN in network intrusion detection.
We outline and model the problem space constraints that attackers need to consider to carry out feasible structural attacks in real-world scenarios.
Our findings demonstrate the increased robustness of the models against classical feature-based adversarial attacks.
arXiv Detail & Related papers (2024-03-18T14:40:33Z) - Quantum-Inspired Analysis of Neural Network Vulnerabilities: The Role of
Conjugate Variables in System Attacks [54.565579874913816]
Neural networks demonstrate inherent vulnerability to small, non-random perturbations, emerging as adversarial attacks.
A mathematical congruence manifests between this mechanism and the quantum physics' uncertainty principle, casting light on a hitherto unanticipated interdisciplinarity.
arXiv Detail & Related papers (2024-02-16T02:11:27Z) - Investigating Human-Identifiable Features Hidden in Adversarial
Perturbations [54.39726653562144]
Our study explores up to five attack algorithms across three datasets.
We identify human-identifiable features in adversarial perturbations.
Using pixel-level annotations, we extract such features and demonstrate their ability to compromise target models.
arXiv Detail & Related papers (2023-09-28T22:31:29Z) - The Feasibility and Inevitability of Stealth Attacks [63.14766152741211]
We study new adversarial perturbations that enable an attacker to gain control over decisions in generic Artificial Intelligence systems.
In contrast to adversarial data modification, the attack mechanism we consider here involves alterations to the AI system itself.
arXiv Detail & Related papers (2021-06-26T10:50:07Z) - Resilience of Bayesian Layer-Wise Explanations under Adversarial Attacks [3.222802562733787]
We show that for deterministic Neural Networks, saliency interpretations are remarkably brittle even when the attacks fail.
We suggest and demonstrate empirically that saliency explanations provided by Bayesian Neural Networks are considerably more stable under adversarial perturbations.
arXiv Detail & Related papers (2021-02-22T14:07:24Z) - Measurement-driven Security Analysis of Imperceptible Impersonation
Attacks [54.727945432381716]
We study the exploitability of Deep Neural Network-based Face Recognition systems.
We show that factors such as skin color, gender, and age, impact the ability to carry out an attack on a specific target victim.
We also study the feasibility of constructing universal attacks that are robust to different poses or views of the attacker's face.
arXiv Detail & Related papers (2020-08-26T19:27:27Z) - A Self-supervised Approach for Adversarial Robustness [105.88250594033053]
Adversarial examples can cause catastrophic mistakes in Deep Neural Network (DNNs) based vision systems.
This paper proposes a self-supervised adversarial training mechanism in the input space.
It provides significant robustness against the textbfunseen adversarial attacks.
arXiv Detail & Related papers (2020-06-08T20:42:39Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.