Defending method for malicious request packet of interest attacks in NDN (Named Data Networking)

Abstract

The invention discloses a defending method for malicious request packet of interest attacks in an NDN (Named Data Networking). An average packet of interest loss rate of a next hop forwarding node is queried periodically. Selectable forwarding nodes are divided into a reliable group and an unreliable group. A corresponding forwarding probability is set according to a downlink interface packet of interest fill rate of currently received request packets of interest and a requested content class. According to the probability, a certain node in the reliable group and the unreliable group is selected as the forwarding node. The user malicious requests are forwarded to the unreliable group in large probability, thereby converging malicious request streams. On this base, with respect to forwarding traffic of an uplink interface, a speed is limited according to the average packet of interest loss rate of a forwarding target group. The ratio in the forwarding streams after limitation of the speed is determined according to a source interface fill rate of the request packets of interest. The user malicious requests are effectively eliminated. The method can be applied to the NDN with the user malicious requests. The reliability of the network can be effectively ensured.

Description

technical field [0001] The present invention relates to a data naming network (NDN: Named Data Networking), and specifically designs a defense method for malicious request interest packet attacks in NDN (H04W28 / 14 uses intermediate memory; H04Q3 / 495 is used for routing connection channels). Background technique [0002] "Data content-centered" is the core design idea of ​​the next-generation Internet architecture. Since 2006, foreign academic circles have carried out a number of research projects on the next-generation Internet architecture, including the "data-oriented Network Architecture" (Data-Oriented Network Architecture, DONA), EU FP7 4WARD and "Publish / Subscribe Internet Routing Paradigm" (The Publish-Subscribe Internet Routing Paradigm, PSIRP), the Named Data Network (Named Data Network) proposed by UCLA Networking, NDN), etc., among which NDN is more representative and is currently a research hotspot of the next generation Internet architecture. Unlike the traditi...

AI Technical Summary

Problems solved by technology

In fact, this rate limiting mechanism has obvious disadvantages. The rate limit is based on the satisfaction rate of the downlink interface. At the same time, it also limits the rate of legitimate request interest packets, which significantly inhibits the network access capabilities of normal requesting users, so it needs to be improved.

[0008] Documents [1-2] all adopt the downlink interface rate-limiting mechanism to defend against malicious request interest packet attacks, but this mechanism does not differentiate between requests from normal users and requests from malicious users, resulting in serious constraints on the performance of normal users

In addition, since malicious request interest packets are often scattered on each downlink interface, NDN nodes need to restrict each downlink interface, making the overall work efficiency of the node extremely low

Images