Efficient Content Verification in Named Data Networking
Authors:
Open Access
- 30 September 2015
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 109-116
Abstract
In Named Data Networking, contents are retrieved from network caches as well as the content server by their name. This aspect arises severe security concerns on content integrity. Especially, if poisoned contents lie in the network cache, called content store(CS), interests would be served by the poisoned content rather than they propagate toward the content server. Consequently, users whose interests pass through the contaminated CS cannot access the valid content. In order to resolve the problem, every content is verified before they are inserted into the CS. However, this built-in verification mechanism is not practically feasible due to its huge computational overhead. In this paper, we address problems of content integrity in NDN in details, including how to violate content integrity. We also propose a practical solution that efficiently detects poisoned contents from the CS with minimum overhead. Since the proposed scheme aligns to the basic NDN architecture, it is a practical and effective solution.Keywords
Funding Information
- National Research Foundation of Korea (NRF-2014K1A1A2064649)
This publication has 13 references indexed in Scilit:
- Network-Layer Trust in Named-Data NetworkingACM SIGCOMM Computer Communication Review, 2014
- Needle in a Haystack: Mitigating Content Poisoning in Named-Data Networking2014
- A lightweight mechanism for detection of cache pollution attacks in Named Data NetworkingComputer Networks, 2013
- INFORM2013
- Check before storingACM SIGCOMM Computer Communication Review, 2013
- DoS and DDoS in Named Data Networking2013
- Privacy risks in named data networkingACM SIGCOMM Computer Communication Review, 2012
- Networking named content2009
- Internet Cache Pollution Attacks and Countermeasures2006
- Caching strategies to improve disk system performanceComputer, 1994