Mitigating Content Poisoning With Name-Key Based Forwarding and Multipath Forwarding Based Inband Probe for Energy Management in Smart Cities

被引:18
作者
Hu, Xiaoyan [1 ,2 ,3 ,4 ]
Gong, Jian [1 ,2 ,3 ,4 ]
Cheng, Guang [1 ,2 ,3 ,4 ]
Zhang, Guoqiang [5 ]
Fan, Chengyu [6 ]
机构
[1] Southeast Univ, Sch Cyber Sci & Engn, Nanjing 211189, Jiangsu, Peoples R China
[2] Southeast Univ, Sch Comp Sci & Engn, Nanjing 211189, Jiangsu, Peoples R China
[3] Southeast Univ, Key Lab Comp Network & Informat Integrat, Minist Educ China, Nanjing 211189, Peoples R China
[4] Jiangsu Prov Key Lab Comp Network Technol, Nanjing 211189, Jiangsu, Peoples R China
[5] Nanjing Normal Univ, Sch Comp Sci & Technol, Nanjing 210023, Jiangsu, Peoples R China
[6] Colorado State Univ, Dept Comp Sci, Ft Collins, CO 80523 USA
基金
中国国家自然科学基金;
关键词
Content poisoning; name-key based forwarding; multipath forwarding based inband probe; energy management; smart city; SECURITY; STRATEGY; ATTACKS;
D O I
10.1109/ACCESS.2018.2854928
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
As a promising future Internet architecture, named data networking (NDN) supports name-based routing and caching for content retrieval throughout the network, which enables fast, reliable, and, more importantly, energy-efficient content dissemination in smart cities. However, NDN's vulnerability against the content poisoning attack is considered to decelerate the process of applying NDN to energy management in smart cities. The content poisoning isolates valid content from the network by injecting a poisoned content with a legitimate name into in-network caches. The caching, delivery, and signature verification of poisoned content diminish the advantage of NDN in energy efficiency when it disseminates content in smart cities. This paper focuses on content poisoning mitigation for energy management in smart cities and first analyzes the state of the art and the challenges of content poisoning mitigation. We then propose a light-weight mitigation mechanism by enhancing NDN with a name-key-based forwarding and multipath forwarding-based inband probe. Name-key-based forwarding forwards interests toward content sources trusted by consumers to reduce the injection of poisoned content. If there is still on-path content poisoning, the multipath forwarding of a reissued interest that excludes poisoned content acts as inband probes and invokes on-demand signature verifications at intermediate routers. This purges poisoned content from caches as soon as possible, delivers legitimate content to the present consumer, and restores legitimate content retrieval for future Interests without requiring any out-of-band communications. Our experimental results demonstrate that our proposed content poisoning mitigation mechanism restores legitimate content retrieval pretty soon with relatively small verification overhead at intermediate routers and is well adapted to diverse network settings, which would accelerate the deployment of NDN in smart cities to disseminate content in an energy-efficient way.
引用
收藏
页码:39692 / 39704
页数:13
相关论文
共 46 条
[1]   A Survey of Security Attacks in Information-Centric Networking [J].
AbdAllah, Eslam G. ;
Hassanein, Hossam S. ;
Zulkernine, Mohammad .
IEEE COMMUNICATIONS SURVEYS AND TUTORIALS, 2015, 17 (03) :1441-1454
[2]  
Afanasyev A, 2017, 26 INT C COMPUTER CO
[3]   An In-Network Caching Scheme Based on Energy Efficiency for Content-Centric Networks [J].
An, Ying ;
Luo, Xi .
IEEE ACCESS, 2018, 6 :20184-20194
[4]  
[Anonymous], 1998, PROC S NETWORK DISTR
[5]  
[Anonymous], 2011, P 2011 IEEE INT C CO
[6]  
[Anonymous], 2016, PROC 7 INT C NETW FU, DOI DOI 10.1109/NOF.2016.7810123
[7]  
[Anonymous], IEEE T EMERG TOPICS
[8]  
[Anonymous], 2015, U CALIFORNIA
[9]  
[Anonymous], 2009, P 5 INT C EM NETW EX, DOI [DOI 10.1145/1658939.1658941, 10.1145/1658939.1658941]
[10]  
[Anonymous], 2014, NDSS WORKSHOP SECURI