.png){kind=icon}
返回
Capability-Based Security Enforcement in Named Data Networking
.png){kind=icon}
PRE
AI
DOI：10.1109/TNET.2017.2715822.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Named data networking (NDN) enhances traditional IP networking by supporting in-network content caching for better bandwidth usage and location-independent data accesses for multi-path forwarding. However, NDN also brings new security challenges. For example, an adversary can arbitrarily inject packets to NDN to poison content cache, or access content packets without any restrictions. We propose capability-based security enforcement architecture (CSEA), a capability-based security enforcement architecture that enables data authenticity in NDN in a distributed manner. CSEA leverages capabilities to specify the access rights of forwarded packets. It allows NDN routers to verify the authenticity of forwarded packets, and throttles flooding-based DoS attacks from unsolicited packets. We further develop a lightweight one-time signature scheme for CSEA to ensure the timeliness of packets and support efficient verification. We prototype CSEA on the open-source CCNx platform, and evaluate CSEA via testbed and Planetlab experiments. Our experimental results show that CSEA only incurs around 4% of additional delays in retrieving data packets.
Keyword:
Security
capability
named data networking
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
I
IF:
3.6
论文数:
4.4K
被引数:
9.5K
机构
引用论文
On the fine structure of X-ray absorption edges and the influence of the polar character of the compound.png)
Physica
PhysicaIF0
PREAI
分享收藏LIVE: Lightweight Integrity Verification and Content Access Control for Named Data NetworkingLIVE: 针对命名数据网络的轻量级完整性验证和内容访问控制
PREAI
分享收藏
查看更多内容