http://doc.tm.uka.de/SKademlia_2007.pdf
Combine that with using the global overlay only for bootstrapping of common-interest sub-networks and you'll limit the incentives that an attacker will have to attack the global overlay while also reducing the effectiveness because a single non-fake contact will be sufficient to join the subnetwork.
It's not an absolute defense (sybil-resistance without central authority is hard) but in practice it won't be worth it for attackers.