CCN中基于节点状态模型的缓存污染攻击检测算法

doi:10.11959/j.issn.1000-436x.2016172

Abstract

Abstract:

Aiming at cache pollution attacks in content centric networking,the attacks were quantitatively described by three parameters,namely number of pollution contents,distribution of attack requests and attack intensity,then the cache state model of node under attack was built.Benefited from the analysis of key parameters of cache node,the attack detection principle based on node state model was put forward,correspondingly,two attack detection algorithms were instantiated with the observation parameters of cache replacement ratio and request arrival rate.The simulation results show that proposed algorithm can obtain good detection performance under each decentralized attack and centralized attack.

Key words: content centric networking, cache pollution attacks, cache state model, attack detection

Hong-bo TANG,Lin-hao ZHENG,Guo-dong GE,Quan YUAN. Detection algorithm for cache pollution attacks based on node state model in content centric networking[J]. Journal on Communications, 2016, 37(9): 1-9.

Figures/Tables 9

References 17

[1]	XYLOMENOS G , VERVERIDIS C , SIRIS V ,et al. A survey of information-centric networking research[J]. IEEE Communications Surveys ＆amp; Tutorials, 2014,16: 1024-1049.
[2]	JACOBSON V , SMETTERS D K , THORNTON J D ,et al. Networking named content[J]. Communications of the ACM, 2012,55(1): 117-124.
[3]	兰巨龙, 程东年, 胡宇翔 . 可重构信息通信基础网络体系研究[J]. 通信学报, 2014,35(1): 128-139. LAN J L , CHENG D N , HU Y X . Research on reconfigurable information communication based network architecture[J]. Journal on Communications, 2014,35(1): 128-139.
[4]	ACS G , CONTI M , GASTI P ,et al. Cache privacy in named-data networking[C]// IEEE International Conference on Distributed Computing Systems. Philadelphia,USA, 2013: 41-51.
[5]	CHAABANE A , DE CRISTOFARO E , KAAFAR M A ,et al. Privacy in content-oriented networking:threats and countermeasures[J]. ACM SIGCOMM Computer Communication Review, 2013,43(3): 25-33.
[6]	LAUINGER T . Security ＆amp; scalability of content-centric networking[D]. TU Darmstadt, 2010.
[7]	CONTI M , GASTI P , TEOLI M . A lightweight mechanism for detection of cache pollution attacks in named data networking[J]. Computer Networks, 2013,57(16): 3178-3191.
[8]	PARK H , WIDJAJA I , LEE H . Detection of cache pollution attacks using randomness checks[C]// IEEE International Conference on Communications (ICC). Ottawa, 2012: 1096-1100.
[9]	XIE M , WIDJAJA I , WANG H . Enhancing cache robustness for content-centric networking[C]// IEEE INFOCOM Annual IEEE International Conference on Computer Communications. Orlando, 2012: 2426-2434.
[10]	SANDBERG A,EKL?V D , HAGERSTEN E . Reducing cache pollution through detection and elimination of non-temporal memory accesses[C]// 2010 ACM/IEEE International Conference for High Performance Computing,Networking,Storage and Analysis. Washington DC:IEEE Computer Society, 2010: 1-11.
[11]	KIM Y , YEOM I . Performance analysis of in-network caching for content-centric networking[J]. Computer Networks, 2013,57(13): 2465-2482.
[12]	DAN A , TOWSLEY D . An approximate analysis of the LRU and FIFO buffer replacement schemes[M]. New York,USA: ACM PublisherPress, 1990: 143-152.
[13]	CHAI W K , HE D , PSARAS I ,et al. Cache “less for more” in information-centric networks[C]// IFIP Networking. Prague,Czech, 2012: 27-40.
[14]	ROSENSWEIG E J , KUROSE J , TOWSLEY D . Approximate models for general cache networks[C]// IEEE INFOCOM 2010. San Diego, 2010: 1-9.
[15]	DENG L , GAO Y , CHEN Y ,et al. Pollution attacks and defenses for Internet caching systems[J]. Computer Networks, 2008,52(5): 935-956.
[16]	MOHAISEN A , ZHANG X W , SCHUCHARD M ,et al. Protecting access privacy of cached contents in information centric networks[C]// ACM SIGSAC Symposium on Information,Computer and Communications Security. Hangzhou,China, 2013: 173-178.
[17]	AFANASYEV A , MAHADEVAN P , MOISEENKO I ,et al. Interest flooding attack and countermeasures in named data networking[C]// IFIP Networking Conference. New York, 2013: 1-9.

Metrics

Recommended 0

No Suggested Reading articles found!

模型参数	可观测性
总未命中概率P _miss	可观测
正常请求未命中概率P _miss,n	不可观测
攻击请求未命中概率P _miss,a	不可观测
单位时间缓存替换率m	可观测
单位时间正常内容替换率m_n	不可观测
单位时间污染内容替换率m_a	不可观测
内容请求的到达率r	可观测
正常请求到达率λ_n	不可观测
攻击请求到达率λ_a	不可观测

检测方法			攻击模式
检测方法	轻量攻击	集中式攻击	分散式轻量攻击	分散式攻击	中量攻击
单位时间替换率检测	?0.22	0.15	?0.10	1.30	0.44
请求到达率检测	0.10	8.00	?0.21	?0.02	0.34
LWM	?0.17	2.05	?0.22	2.01	0.60
CUSUM	?0.18	?0.20	2.80	0.10	?0.05

Detection algorithm for cache pollution attacks based on node state model in content centric networking

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 9

References 17

Related Articles 12

Metrics

Recommended 0

[1]	Lixia XIE, Xueou LI, Hongyu YANG, Liang ZHANG, Xiang CHENG. Multi-stage detection method for APT attack based on sample feature reinforcement [J]. Journal on Communications, 2022, 43(12): 66-76.
[2]	Xueyuan DUAN, Yu FU, Kun WANG, Bin LI. LDoS attack detection method based on simple statistical features [J]. Journal on Communications, 2022, 43(11): 53-64.
[3]	Wei SUN,Peng ZHANG,Yongquan HE,Lichao XING. Attack detection method based on spatiotemporal event correlation in intranet environment [J]. Journal on Communications, 2020, 41(1): 33-41.
[4]	Chuanhuang LI,Yan WU,Zhengzhe QIAN,Zhengjun SUN,Weiming WANG. DDoS attack detection and defense based on hybrid deep learning model in SDN [J]. Journal on Communications, 2018, 39(7): 176-187.
[5]	Jie WANG,Lili YANG,Min YANG. Multitier ensemble classifiers for malicious network traffic detection [J]. Journal on Communications, 2018, 39(10): 155-165.
[6]	Guo ZHANG,Yu-xiang HU,Wan-wei HUANG,Bin-qiang WANG,Lu-jia CAO. Coordinated caching scheme based on popular content awareness and tracking [J]. Journal on Communications, 2017, 38(2): 132-142.
[7]	EGuo-dong G,UOYun-fei G,ANJu-long L,IUCai-xia L. Dynamic cache size transfer scheme based on replacement rate in content centric networking [J]. Journal on Communications, 2015, 36(5): 120-129.
[8]	Yi ZHU,Zheng-kun MI,Wen-nai WANG. Cache privacy protection strategy in content centric networking [J]. Journal on Communications, 2015, 36(12): 139-150.
[9]	Ming-hua WANG,Ling-yun YING,Deng-guo FENG. Exploit detection based on illegal control flow transfers identification [J]. Journal on Communications, 2014, 35(9): 20-31.
[10]	Hong-bing CHENG,Chun-ming RONG,Xiao HUANG,Skjalg EGGEN,Qing-kai ZENG. Efficient attack detection and data aggregation algorithm [J]. Journal on Communications, 2012, 33(9): 85-94.
[11]	Shan-shan CHEN,Geng YANG,Sheng-shou CHEN. LEACH protocol based security mechanism for Sybil attack detection [J]. Journal on Communications, 2011, 32(8): 143-149.
[12]	Fen YAN,Yi-qun CHEN,Hao HUANG,Xin-chun YIN. Detecting DDoS attack based on compensation non-parameter CUSUM algorithm [J]. Journal on Communications, 2008, 29(6): 128-134.