1. Working Group Security and Incentives Robbert van Renesse Jeroen Doumen Gilles Tredan Harry Li Rachid Guerraoui Lorenzo Alvisi Boris Koldehofe

2. Gossip is not robust! given and hidden assumptions –are exploitable to attackers non-robustness may be caused by –Failing processes –Unexpected behaviour –Environment –Global warming properties that may be violated –availability –connectivity –convergence properties –time it takes to converge

3. Gossip may be robust … only if we assume –Synchrony –limited churn –full independent connectivity –Randomness –Discovery –sufficient memory

4. Better understanding needed Stop defining gossip, do research! –Only 8 security related papers on gossip Unclear how gossip behaves –if we violate assumptions –if we change the protocol Research topics –Byzantine and rational behaviour –Impact of churn