11/WAKU2-RELAY: libp2p FloodSub & GossipSub: Security Analysis

[jimstir]

Reference Issue: vacp2p/rfc#245
Author: staheri14

Problem

To analyze the security of the libp2p FloodSub & GossipSub protocols based on vacp2p/rfc#244.
In this analysis, and for each security feature resulted from vacp2p/rfc#244 the following items should be investigated

1. Attackers and their incentives
2. Any security measures implemented by FloodSub & GossipSub protocols to address the attacks
3. To list all the unaddressed threats
4. To provide DOs and DONTs on how to use FloodSub and GossipSub in order to achieve a higher level of security. This can include any recommendation about activating/avoiding a certain feature/functionality of FloodSub & GossipSub protocols.

This issue is part of vacp2p/rfc#183

Acceptance Criteria

The result shall be a document describing the security guarantees featured by the FloodSub and GossibSub protocols, any instructions on how to activate/utilize those security features. Also, the document should explain the security properties that are out of the scope of these protocols or subject to attack.