Interest packet flooding attack detection system based on path aggregation in NDN network

Abstract

The invention discloses an interest packet flooding attack detection system based on path aggregation in an NDN network, and relates to the field of next-generation Internet architecture and network security. The system comprises a central controller, an NDN router, a content request node and a content providing node. When the content request node needs a certain piece of content, the required content name is placed in the interest packet and sent to the NDN router; the NDN router decides to provide the content to the request node or forward the interest packet according to the locally cachedcontent; when receiving the interest packet, the content providing node puts the requested content in the data packet and sends the data packet back to the request node; the central controller calculates and issues a routing table to the NDN router through a path aggregation and load balancing algorithm; and the NDN router judges whether an interest packet flooding attack is encountered or not according to three indexes of the interest packet satisfaction rate, the request interest table size and the negative response number of each port. According to the invention, the detection speed of theinterest packet flooding attack is obviously improved, and the sensitivity of interest packet flooding attack detection is enhanced.

Description

technical field [0001] The invention relates to the next-generation Internet architecture and the field of network security, in particular to an interest packet flood attack detection system based on path aggregation in an NDN network. Background technique [0002] Information Centric Network (ICN) is one of the important research directions of future network architecture, aiming to support efficient and scalable content acquisition, device mobility and content security mechanism from the architecture level. The basic design concept of ICN is to abandon the transmission protocol architecture based on IP addresses and adopt the transmission protocol architecture centered on the name of information. Simply put, each piece of content is marked with a unique name, which becomes network information; the network can distinguish each piece of information through this name, and the operation of the entire network is driven by the request, routing and transmission of these informatio...

AI Technical Summary

Problems solved by technology

At this time, each interest packet will be forwarded to the producer, and the producer will return a corresponding NACK interest packet for each interest packet, which is more likely to affect the normal operation of the routing node

Images