Theil-Based Countermeasure against Interest Flooding Attacks for Named Data Networks
Theil-Based Countermeasure against Interest Flooding Attacks for Named Data Networks
复制标题
基于泰尔的命名数据网络利息洪泛攻击对策
DOI：
10.1109/mnet.2019.1800350
复制
发表时间：
2019-04
期刊：
影响因子：
9.3
通讯作者：
Ma Maode
中科院分区：
文献类型：
--
作者：
Hou Rui;Han Min;Chen Jing;Hu Wenbin;Tan Xiaobin;Luo Jiangtao;Ma Maode
NDN被广泛认为是信息中心网络（ICN）的一种很有前途的表示和实现方式，是未来Internet体系结构的潜在候选者。然而，NDN的安全性受到被称为IFA的重大安全隐患的威胁，IFA是基于IP的网络上的DoS和分布式DoS攻击的演变。IFA攻击者可以在一个命名的数据网络中创建大量恶意兴趣数据包，快速耗尽NDN路由器的通信信道带宽和缓存容量，从而严重影响路由器对正常用户的数据包接收和转发能力。IFA的准确检测是对抗措施设计中最关键的问题。据我们所知，现有的IFA对策在检测精度方面仍然存在局限性，特别是对于快速变化的攻击。本文提出了一个TC检测正常和恶意兴趣包的分布在NDN路由器，以进一步确定IFA。跟踪方法用于防止进一步的尝试。仿真结果表明了TC对抗IFA的有效性及其相对于其他典型IFA对抗的优势。
NDN has been widely regarded as a promising representation and implementation of information- centric networking (ICN) and serves as a potential candidate for the future Internet architecture. However, the security of NDN is threatened by a significant safety hazard known as an IFA, which is an evolution of DoS and distributed DoS attacks on IP-based networks. The IFA attackers can create numerous malicious interest packets into a named data network to quickly exhaust the bandwidth of communication channels and cache capacity of NDN routers, thereby seriously affecting the routers' ability to receive and forward packets for normal users. Accurate detection of the IFAs is the most critical issue in the design of a countermeasure. To the best of our knowledge, the existing IFA countermeasures still have limitations in terms of detection accuracy, especially for rapidly volatile attacks. This article proposes a TC to detect the distributions of normal and malicious interest packets in the NDN routers to further identify the IFA. The trace back method is used to prevent further attempts. The simulation results show the efficiency of the TC for mitigating the IFAs and its advantages over other typical IFA countermeasures.
登录
查看更多内容
DOI：
10.1109/trustcom.2014.65
发表时间：
2014-09
期刊：
2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications
影响因子：
--
作者：
Dongxia Wang;Tim Muller;Yang Liu;Jie Zhang
通讯作者：
Dongxia Wang;Tim Muller;Yang Liu;Jie Zhang
DOI：
10.1145/2810156.2812604
发表时间：
2015-09
期刊：
Proceedings of the 2nd ACM Conference on Information-Centric Networking
影响因子：
--
作者：
Samir Al-Sheikh;Matthias Wählisch;T. Schmidt
通讯作者：
Samir Al-Sheikh;Matthias Wählisch;T. Schmidt
DOI：
10.1109/glocom.2016.7841526
发表时间：
2016-12
期刊：
2016 IEEE Global Communications Conference (GLOBECOM)
影响因子：
--
作者：
Yonghui Xin;Yang Li;Wei Wang;Weiyuan Li;Xin Chen
通讯作者：
Yonghui Xin;Yang Li;Wei Wang;Weiyuan Li;Xin Chen
DOI：
10.1109/lcomm.2018.2789896
发表时间：
2018-01
期刊：
IEEE Communications Letters
影响因子：
--
作者：
Ting Zhi;Hongbin Luo;Y. Liu
通讯作者：
Ting Zhi;Hongbin Luo;Y. Liu
DOI：
10.1109/infcomw.2013.6970722
发表时间：
2013-04
期刊：
2013 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)
影响因子：
--
作者：
Huichen Dai;Yi Wang;Jindou Fan;B. Liu
通讯作者：
Huichen Dai;Yi Wang;Jindou Fan;B. Liu