Abstract:Named Data Networking (NDN) stands out as a promising Information Centric Networking architecture capable of facilitating large-scale content distribution through in-network caching and location-independent data access. However, attackers can easily inject poisoned content into the network, called content poisoning attacks, which leads to a substantial deterioration in user experience and transmission efficiency. In existing schemes, routers fail to determine the contamination source of received poisoned content, leading to the inability to accurately identify attacker nodes. Besides, attackers’ dynamic behaviors and network instability could disrupt identification results. In this paper, we propose a Secure and Lightweight scheme against content poisoning attacks based on Probing (SLP), where a proactive and reliable probing protocol is designed to identify adversaries quickly and precisely. In SLP, a router sends specifically chosen interest packets to probe a suspicious node, so that the returned corresponding content can straightly reflect its trustworthiness without other nodes’ interference. In addition, a hypothesis testing algorithm is developed to analyze the returned content, which can exclude the impact of transmission errors and adapt to dynamic attackers. Moreover, we utilize users’ feedback to avoid unnecessary probing costs on unaffected routers, with its reliability guaranteed by an efficient cuckoo-filter-based feedback validation mechanism. Security analysis shows that SLP achieves resistance against content poisoning attacks and malicious feedback. The experimental results demonstrate that SLP makes users hardly be affected by attacks and brings in only slight overhead.

A Scalable and Privacy-Preserving Named Data Networking Architecture Based on Bloom Filters

A Review on Impact of Bloom Filter on Named Data Networking: The Future Internet Architecture

SLP: A Secure and Lightweight Scheme Against Content Poisoning Attacks in Named Data Networking Based on Probing

A Smart Routing Scheme for Named Data Networks.

An Encryption and Probability Based Access Control Model for Named Data Networking

Capability-Based Security Enforcement in Named Data Networking

Pull-based Bloom Filter-based Routing for Information-Centric Networks

NDN-NIC

Content Distribution Mechanisms of Named Data Networking

A Peer-To-Peer File Sharing System over Named Data Networking

Achieving Content-Oriented Anonymity with CRISP.

A novel caching scheme for the backbone of Named data networking

Preventing Traffic Explosion and Achieving Source Unobservability in Multi-Hop Wireless Networks Using Network Coding

Preserving Network Privacy on Fine-grain Path-tracking Using P4-based SDN

Content Retrieval At the Edge: A Social-aware and Named Data Cooperative Framework

A Novel Security Scheme Supported by Certificateless Digital Signature and Blockchain in Named Data Networking

A SIP-based Real-time Traffic Mobility Support Scheme in Named Data Networking.

Popularity-driven Coordinated Caching in Named Data Networking

PLR: an In-Network Proactive Loss Recovery Scheme for Named Data Networking.

Differentiated Forwarding and Caching in Named-Data Networking.

Summary-aided Bloom Filter for High-Speed Named Data Forwarding