FROG: A Packet Hop Count based DDoS Countermeasure in NDN

Yoshimichi Nakatsuka, Janaka L. Wijekoon, Hiroaki Nishi

研究成果: Conference contribution

3 被引用数 (Scopus)

抄録

Named Data Networking (NDN) is a promising inter-networking paradigm that focus on content rather than hosts and their physical locations. In NDN Consumers issue Interests for Contents. Producers generate a content in response to each received interest and such content is routed back to the requesting consumer. When compared to IP, NDN brings advantages such as better throughput and lower latency, because routers are able to cache popular contents and satisfy interests for such contents locally. However, before being considered a viable approach, NDN should offer security services that are ideally better, but at least equivalent to current mechanisms in IP.In this regard, mechanisms to prevent DDoS are of paramount importance. In this work we propose FROG: a simple yet effective Interest Flooding Attack (IFA) detection and mitigation method. FROG runs on routers that are directly connected to NDN consumers and monitors packet hop counts. It then calculates mean and variance using stored hop counts to distinguish attackers from legitimate users. We use the NDN simulator ndnSIM to evaluate FROG's effectiveness. Our results show that FROG improves resilience against DDoS attacks. In particular, during an attack, legitimate users can still receive 75% of requested contents. Without FROG this number decreases to 50%.

本文言語English
ホスト出版物のタイトル2018 IEEE Symposium on Computers and Communications, ISCC 2018
出版社Institute of Electrical and Electronics Engineers Inc.
ページ492-497
ページ数6
ISBN(電子版)9781538669501
DOI
出版ステータスPublished - 2018 11 15
イベント2018 IEEE Symposium on Computers and Communications, ISCC 2018 - Natal, Brazil
継続期間: 2018 6 252018 6 28

出版物シリーズ

名前Proceedings - IEEE Symposium on Computers and Communications
2018-June
ISSN(印刷版)1530-1346

Other

Other2018 IEEE Symposium on Computers and Communications, ISCC 2018
国/地域Brazil
CityNatal
Period18/6/2518/6/28

ASJC Scopus subject areas

  • ソフトウェア
  • 信号処理
  • 数学 (全般)
  • コンピュータ サイエンスの応用
  • コンピュータ ネットワークおよび通信

フィンガープリント

「FROG: A Packet Hop Count based DDoS Countermeasure in NDN」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル