Abstract:Information centric networking (ICN) has been regarded as an ideal architecture for the next-generation network to handle users' increasing demand for content delivery with in-network cache. While making better use of network resources and providing better service delivery, an effective access control mechanism is needed due to the widely disseminated contents. However, in the existing solutions, making cache-enabled routers or content providers authenticate users' requests causes high computation overhead and unnecessary delay. Also, the straight-forward utilization of advanced encryption algorithms makes the system vulnerable to DoS attacks. Besides, privacy protection and service accountability are rarely taken into account in this scenario. In this paper, we propose SEAF, a secure, efficient, and accountable edge-based access control framework for ICN, in which authentication is performed at the network edge to block unauthorized requests at the very beginning. We adopt group signature to achieve anonymous authentication and use hash chain technique to reduce greatly the overhead when users make continuous requests for the same file. At the same time, we provide an efficient revocation method to make our framework more robust. Furthermore, the content providers can affirm the service amount received from the network and extract feedback information from the signatures and hash chains. By formal security analysis and the comparison with related works, we show that SEAF achieves the expected security goals and possesses more useful features. The experimental results also demonstrate that our design is efficient for routers and content providers and bring in only slight delay for users' content retrieval.

Fog Computing-Based Firewall in Information-Centric Networking

DM-CIFA: Detection and Mitigation of Collusion Interesting Flooding Attacks in NDNs

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

An Efficient Name Resolving Mechanism for Inter-domain Policy in Content-Centric Networks

A Deep ConvNet-Based Countermeasure to Mitigate Link Flooding Attacks Using Software-Defined Networks

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

A Secure, Efficient, and Accountable Edge-Based Access Control Framework for Information Centric Networks

Mandatory Content Access Control for Privacy Protection in Information Centric Networks

Session-based Access Control in Information-Centric Networks: Design and Analyses.

Artificial Intelligence for Information-Centric Networks

CFADefense: A Security Solution to Detect and Mitigate Crossfire Attacks in Software-Defined IoT-Edge Infrastructure

Attribute identification based IoT fog data security control and forwarding

A Survey on Information-centric Networking: Rationales, Designs and Debates

FETMS: Fast and Efficient Trust Management Scheme for Information-Centric Networking in Internet of Things

Survey of Information-Centric Networking

Information-Centric Networking in Wireless Environments: Security Risks and Challenges

Ncaf: A Reduced Flooding Mechanism for Route Discovery in Icn

Intelligent Computing Collaboration for the Security of the Fog Internet of Things

Exploiting ICN for Realizing Service-Oriented Communication in IoT

On the Cache-and-Forward Network Architecture