Abstract:Traditional IP-based Internet offers an end-to-end data transport service and has developed rapidly in the past half-century.However,serious security incidents emerged from attacks based on traditional networks.Traditional security mechanisms(e.g.,firewalls,intrusion detection systems) enhance security.However,most of them only provide some remedial strategies rather than solve the address-security problem radically due to the lack of change in network design.The overall in-depth security of the networked system cannot be guaranteed without a fundamental change.In order to meet the development requirements of the next generation of an endogenous security network,one of the future networks,the multi-identifier network(MIN),is introduced as our research background.This paper proposes an efficient scheme in hieratical architecture that provides comprehensive protection by addressing the security aspects pertaining to the network and application layers.At the network layer,the proposed architecture develops a multi-identifier routing scheme with embedded identity-based authentication and packet signature mechanisms to provide data tamper-resistance and traceability.At the application layer,the proposed architecture designs a mimic defensive scheme combined with weighted network centrality measures.This scheme focuses on protecting the core components of the whole network to improve the service's robustness and efficiently resist potential attacks.This paper tests and evaluates the proposed scheme from a theoretical and practical perspective.An analytical model is built based on the random walk for theoretical evaluation.In experiments,the proposed scheme is developed in MIN as MIN-VPN.Then considering IP-VPN as a baseline,anti-attack tests are conducted on IP-VPN and MIN-VPN.The results of theoretical evaluations and experiments show that the proposed scheme provides excellent transmission performance and successful defense against various TCP/IP-based attacks with acceptable defensive cost,demonstrating this security mechanism's effectiveness.In addition,after long-period penetration testing in three international elite security contests,the proposed method is effectively immune to all TCP/IP-based attacks from thousands of professional teams,thus verifying its strong security.

Co-governed Space-Terrestrial Integrated Network Architecture and Prototype Based on MIN

MIN: Co-Governing Multi-Identifier Network Architecture and Its Prototype on Operator's Network

SI-STIN: A Smart Identifier Framework for Space and Terrestrial Integrated Network

Prototype of Sovereignty Network and Application of Private Network Based on MIN

A Secure and Efficient Transport Protocol for Multi-Identifier Network

Scalable Identifier System for Industrial Internet Based on Multi-Identifier Network Architecture

A Design of Wi-Fi Transmission Mechanism Based on Multi-identity Network

Prototype and Testing Report of a Multi-Identifier System for Reconfigurable Network Architecture under Co-Governing

MIR - Multi-Identifier Router and Its Prototype.

The Prototype of Decentralized Multilateral Co-Governing Post-IP Internet Architecture and Its Testing on Operator Networks

Intra-domain Routing Protocol OSPF+ for Integrated Terrestrial and Space Networks

Efficiently Secure Architecture for Future Network

An Identity Management Protocol For Multi-Identifier Network

A Network Architecture Containing Both Push and Pull Semantics

Key Technologies of Sovereignty Network

Secure and Efficient Token Based Roaming Authentication Scheme for Space-Earth Integration Network

Software defined intelligent satellite-terrestrial integrated networks: Insights and challenges

An ICN/SDN-Based Network Architecture and Efficient Content Retrieval for Future Satellite-Terrestrial Integrated Networks

Adaptive Multi-Layer Deployment for A Digital Twin Empowered Satellite-Terrestrial Integrated Network

STARRYNET: Empowering Researchers to Evaluate Futuristic Integrated Space and Terrestrial Networks

MIN-MQTT: A Publish/Subscribe Approach Based on Multi-Identifier Network in V2X