Coordinated detection method of NDN low-speed cache pollution attack

A pollution attack and collaborative detection technology, applied to electrical components, transmission systems, etc., can solve problems such as slow and low-speed cache pollution attacks, unsuitable detection schemes, etc.

CN104836810AActive Publication Date: 2015-08-12JIANGSU UNIV
4 Cites 21 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2015-08-12

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses a coordinated detection method of an NDN low-speed cache pollution attack, which can be used for detecting attack behaviour through calculating multilayer node request change rates on a transmission path, thereby fusing nodes in each layer and correlation of request change rates of nodes in a first layer. The method of the invention can ensure high correct detection rate under occasion of the low-speed cache pollution attack, and simultaneously reduce detection delay of a dispersed attack by cooperating with more than three layers of routes. The method of the invention can be used for effectively detecting a low-speed concentrated attack and the dispersed attack simultaneously and improving detection performance by sacrificing space complexity. The method of the invention can be applied to detect a cache pollution attack of named data networking.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The present invention relates to data naming network (NDN: Named Data Networking), and specifically designs a cooperative detection method for NDN low-speed cache pollution attack. H04W28 / 14 uses intermediate memory; H04L29 / 06 is characterized by protocol. Background technique

[0002] Next-generation Internet architecture is one of the important research directions in the current network field. Since 2010, NSF has sponsored four future network research projects: NDN (Named Data Networking) project, MobilityFirst project, NEBULA project, and XIA project, among which NDN (Named Data Networking) belongs to the content-centric network category, It is a research hotspot of the next generation Internet architecture. The so-called content-centric network is based on content as the center of the network and adopts a content-oriented design architecture, which is different from the traditional Internet where the host is the center of the network. NDN only fo...

Examples

Embodiment Construction

[0026] The technical solution of the present invention will be described in further detail below in conjunction with the accompanying drawings.

[0027] Assuming an NDN network scenario such as figure 1 As shown, a data fusion center is set up in the network to centrally process the detection data of each routing node and feed back the detection results. The network topology is set to a four-layer cascade structure. The content in the network is divided into K=200 categories, and the number of content in each category is 1000 , the cache size C=10G, the single file size is 10Mbyte, the cache replacement strategy adopts LRU (Least Recently Used), and the cache judgment strategy adopts LCE (Leave Copy Everywhere); the legal user's request obeys the Zipf distribution of α=1.2; the first The request arrival rate of layer nodes obeys the Poisson distribution, 100 interest packet requests are randomly generated per second, the time unit length is set to 10 seconds, and a user reques...