Cache pollution attack detection and defense method for information-centric network based on density clustering

Abstract

The invention belongs to the technical field of detection and defense of information center network cache pollution attack, and specifically relates to a density clustering-based information center network cache pollution attack detection and defense method. The present invention aims at the problem of low detection accuracy existing in existing cache pollution attack detection and defense methods, utilizes KANN‑DBSCAN to cluster the request ratio and average request time interval of user requests, and judges users according to the clustering results Whether the request conforms to the Zipf distribution achieves a more accurate detection of cache pollution attacks. Once the cache pollution attack is detected, the present invention can quickly organize effective defenses to FLA or LDA, prevent accurately detected malicious content from being stored in the CS of the routing node, so that the malicious content cannot occupy the cache space of the routing node, which will greatly Improve the cache hit rate of normal user requests in the node, and reduce the average number of hops for content requests.

Description

technical field [0001] The invention belongs to the technical field of detection and defense of information center network cache pollution attack, and specifically relates to a density clustering-based information center network cache pollution attack detection and defense method. Background technique [0002] The cache pollution attack of the information center network mainly means that the attacker can make these contents occupy the cache space of the node for a long time by continuously requesting non-popular normal contents. Cache pollution attacks will cause some requests of normal users to fail to hit the nearest routing node directly. These normal requests will be forwarded to other cache nodes until the content of the request is obtained, which reduces the cache hit rate of normal requests and increases the access of normal users Delay increases the possibility of network congestion and seriously affects network performance. [0003] Cache pollution attacks can be d...

AI Technical Summary

Problems solved by technology

In LDA, the attacker uniformly and distributedly requests a large number of different types of unpopular legal content, which makes the cache of ICN nodes store a large number of originally unpopular content, and artificially increases the popularity of various unpopular content. The distribution of content requests to routing nodes is smoothed, which significantly reduces the hit rate of various types of content

Images