Multi-parameter cache pollution attack detection method in content centric networking

Abstract

The invention relates to content centric networking, in particular to a multi-parameter cache pollution attack detection method in the content centric networking. The multi-parameter cache pollution attack detection method in the content centric networking comprises the following steps: performing attack detection periodically and circularly, and calculating a sampling value of the attack impact degree in the current cycle; defining the variable quantity of the sampling value of the current attack impact degree to the last cycle as the variable quantity of the attack impact degree; setting a threshold according to the standard deviation of the variable quantity of the attack impact degree in a number of cycles; and determining that the attack occurs if the variable quantity of the attack impact degree exceeds the threshold. Compared with the traditional cache pollution attack detection method, the multi-parameter cache pollution attack detection method in the content centric networkingcan cope with more complex network environment, and can detect the cache pollution attack behavior in time and accurately, therefore, the multi-parameter cache pollution attack detection method in the content centric networking helps to improve the overall security performance of the content centric networking.

Description

technical field [0001] The invention relates to a content-centric network, in particular to a multi-parameter cache pollution attack detection method in a content-centric network. Background technique [0002] With the continuous development of Internet technology and applications, users' demand for network data content is increasing day by day, and content requests and information services have gradually become the main body of network applications. The traditional host-centric IP network architecture is increasingly difficult to meet the current Internet requirements. development requirements. In order to meet the requirements of future network development, the University of California, Los Angeles and the Palo Alto Research Center (Palo Alto Research Center, PARC) proposed a content-centric network (Content Centric Networking, CCN) that replaces IP addresses with content, and quickly It has become a research hotspot in the current future network architecture. [0003] T...

AI Technical Summary

Problems solved by technology

Its advantage is that the calculation cost is small, and it can detect cache pollution attacks very well, especially distributed attacks; its disadvantage is that when there is no cache pollution attack, the judgment threshold is small, and the change in the request probability of normal users may be greater than the judgment threshold. , leading to misjudgment

The literature "Karami A, Guerrero-Zapata M.An anfis-based cache replacement method formitigating cache pollution attacks in named data networking [J]. ComputerNetworks, 2015, 80:51-65." proposes an adaptive fuzzy neural network cache Replacement strategy, the output of the neural network is used as the detection basis for cache pollution attacks, and the amount of calculation is large

[0005] Summarizing the existing typical cache pollution attack detection mechanisms, it is not difficult to find that they only observe a single network parameter when designing cache pollution attack detection algorithms, so it is often difficult to detect cache pollution attack behaviors in a timely and accurate manner, and few simultaneous The case of joint attack detection considering multiple network parameters

Images