命名数据网络低速缓存污染攻击的协同检测机制.PDFVIP

2015年12月 北 京 邮 电 大 学 学 报 Dec.2015 第38卷 第6期 Journal of Beijing University of Posts and Telecommunications Vol.38 No.6 摇 摇 文章编号:1007鄄5321(2015)06鄄0044鄄05 DOI:10.13190/ j.jbupt.2015.06.010 命名数据网络低速缓存污染攻击的协同检测机制 朱摇 轶,摇 施摇 佳,摇 龚摇 朴,摇 曹清华,摇 苏摇 东 (江苏大学 计算机科学与通信工程学院,江苏 镇江212013) 摘要:缓存污染攻击是命名数据网络中的主要安全威胁之一,为解决缓存污染攻击中的低速率攻击问题,在计算网 络中相邻多节点请求变动率的基础上,以传输路径中各节点与网络边缘节点请求变动率的相关性为检测依据,提 出一种协同检测机制. 仿真结果表明,该机制能有效检测低速攻击行为,与现有主要检测方法相比,可保证较高的 正确检测率,同时适当增加协同层数,能降低分散攻击的检测时延. 关摇 键摇 词:命名数据网络;缓存污染攻击;低速攻击;协同检测 中图分类号:TN911摇 摇 摇 摇 文献标志码:A Collaborative Detection Mechanism for Low鄄rate Cache Pollution Attack in Named Data Networking ZHU Yi,摇 SHIJia,摇 GONG Pu,摇 CAO Qing鄄hua,摇 SU Dong (School of Computer Science and Communication Engineering,Jiangsu University,Jiangsu Zhenjiang212013,China) Abstract:Cache pollution attack is one of main security threats in named data networking. Focusing on low鄄rate cache pollution attack,the article proposed a collaborative detection mechanism. This mecha鄄 nism calculates the request variability of every node in transmission path,adopts the request variability correlation betweenarbitrary middlenodeandnetworkedgenodeasdetectionindicator. Simulationsshow that themechanismcanimprovethedetectionrate,ensurethedetectionreliability. With appropriatecol鄄 laborative nodes,it can detect locality鄄disruption more quickly. Compared with other typical detection methods,it is an effectively detection way for low鄄rate cache pollution attack. Key words:named data networking ;cache pollution attack;low鄄rate attack;collaborative detection 摇 摇 缓存污染攻击是命名数据网络(NDN,named 合缓存中内容请求的随机性进行检测,该方法不依 data networking)中的一类重要安全隐患,包括分散 赖于请求者的源地址,适用于NDN,但计算量过大.