Get 20M+ Full-Text Papers For Less Than $1.50/day. Start a 7-Day Trial for You or Your Team.

Learn More →

DADI: Defending against distributed denial of service in information‐centric networking routing and caching

DADI: Defending against distributed denial of service in information‐centric networking routing... Information‐centric networking (ICN) is a new communication paradigm for the upcoming next‐generation internet (NGI). ICN is an open environment that depends on in‐network caching and focuses on contents. These attributes make ICN architectures subject to different types of routing and caching attacks. An attacker publishes invalid contents or announces malicious routes and sends malicious requests for available and unavailable contents. These types of attacks can cause distributed denial of service (DDoS) and cache pollution in ICN architectures. In this paper,we propose a Defending solution Against DDoS in ICN routing and caching (DADI) that detects and prevents these DDoS attacks. This solution allows ICN routers to differentiate between legitimate and attack behaviors in the detection phase based on threshold values. In the prevention phase, ICN routers are able to take actions against these attacks. In our experiments, we measure satisfied requests for legitimate users and cache hit ratio for ICN routers, which are evaluated over different scenarios when there are 20%, 50%, and 80% attackers with respect to legitimate users. The experiments show that the proposed solution effectively mitigates routing‐ and caching‐related DDoS attacks in ICN and enhances ICN performance in the existence of DDoS attacks. http://www.deepdyve.com/assets/images/DeepDyve-Logo-lg.png Security and Privacy Wiley

DADI: Defending against distributed denial of service in information‐centric networking routing and caching

Download PDF
17 pages

Loading next page...
 
/lp/wiley/dadi-defending-against-distributed-denial-of-service-in-information-tCWMD7I1wi

References (53)

Publisher
Wiley
Copyright
Copyright © 2018 John Wiley & Sons, Ltd.
eISSN
2475-6725
DOI
10.1002/spy2.16
Publisher site
See Article on Publisher Site

Abstract

Information‐centric networking (ICN) is a new communication paradigm for the upcoming next‐generation internet (NGI). ICN is an open environment that depends on in‐network caching and focuses on contents. These attributes make ICN architectures subject to different types of routing and caching attacks. An attacker publishes invalid contents or announces malicious routes and sends malicious requests for available and unavailable contents. These types of attacks can cause distributed denial of service (DDoS) and cache pollution in ICN architectures. In this paper,we propose a Defending solution Against DDoS in ICN routing and caching (DADI) that detects and prevents these DDoS attacks. This solution allows ICN routers to differentiate between legitimate and attack behaviors in the detection phase based on threshold values. In the prevention phase, ICN routers are able to take actions against these attacks. In our experiments, we measure satisfied requests for legitimate users and cache hit ratio for ICN routers, which are evaluated over different scenarios when there are 20%, 50%, and 80% attackers with respect to legitimate users. The experiments show that the proposed solution effectively mitigates routing‐ and caching‐related DDoS attacks in ICN and enhances ICN performance in the existence of DDoS attacks.

Journal

Security and Privacy – Wiley

Published: Mar 1, 2018

Keywords: ; ;

There are no references for this article.