FROG: A Packet Hop Count based DDoS Countermeasure in NDN

Yoshimichi Nakatsuka, Janaka L. Wijekoon, Hiroaki Nishi

Research output: Chapter in Book/Report/Conference proceedingConference contribution

2 Citations (Scopus)

Abstract

Named Data Networking (NDN) is a promising inter-networking paradigm that focus on content rather than hosts and their physical locations. In NDN Consumers issue Interests for Contents. Producers generate a content in response to each received interest and such content is routed back to the requesting consumer. When compared to IP, NDN brings advantages such as better throughput and lower latency, because routers are able to cache popular contents and satisfy interests for such contents locally. However, before being considered a viable approach, NDN should offer security services that are ideally better, but at least equivalent to current mechanisms in IP.In this regard, mechanisms to prevent DDoS are of paramount importance. In this work we propose FROG: a simple yet effective Interest Flooding Attack (IFA) detection and mitigation method. FROG runs on routers that are directly connected to NDN consumers and monitors packet hop counts. It then calculates mean and variance using stored hop counts to distinguish attackers from legitimate users. We use the NDN simulator ndnSIM to evaluate FROG's effectiveness. Our results show that FROG improves resilience against DDoS attacks. In particular, during an attack, legitimate users can still receive 75% of requested contents. Without FROG this number decreases to 50%.

Original languageEnglish
Title of host publication2018 IEEE Symposium on Computers and Communications, ISCC 2018
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages492-497
Number of pages6
Volume2018-June
ISBN (Electronic)9781538669501
DOIs
Publication statusPublished - 2018 Nov 15
Event2018 IEEE Symposium on Computers and Communications, ISCC 2018 - Natal, Brazil
Duration: 2018 Jun 252018 Jun 28

Other

Other2018 IEEE Symposium on Computers and Communications, ISCC 2018
CountryBrazil
CityNatal
Period18/6/2518/6/28

    Fingerprint

Keywords

  • DDoS attack
  • Information-Centric Networking
  • Interest Flooding Attack
  • Named Data Networking
  • Packet Hop Count

ASJC Scopus subject areas

  • Software
  • Signal Processing
  • Mathematics(all)
  • Computer Science Applications
  • Computer Networks and Communications

Cite this

Nakatsuka, Y., Wijekoon, J. L., & Nishi, H. (2018). FROG: A Packet Hop Count based DDoS Countermeasure in NDN. In 2018 IEEE Symposium on Computers and Communications, ISCC 2018 (Vol. 2018-June, pp. 492-497). [8538468] Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ISCC.2018.8538468