内容中心网络下基于前缀识别的兴趣包泛洪攻击防御方法  

Mitigating Interest Flooding Attack Based on Prefix Identification in Content-centric Networking

作　　者：唐建强[1] 周华春[1] 刘颖[1] 张宏科[1] 

机构地区：[1]北京交通大学电子信息工程学院,北京100044

出　　处：《电子与信息学报》2014年第7期1735-1742,共8页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(61271202;61202428);北京市自然科学基金(4122060);中央高校基本科研业务费专项(2013JBM013)资助课题

摘　　要：针对内容中心网络(Content-Centric Networking,CCN)下的兴趣包泛洪攻击问题,该文提出基于异常名称前缀识别的协同反馈防御方法。利用CCN中路由器维持的兴趣包转发状态检测兴趣包泛洪攻击,识别异常名称前缀,并向相邻节点发送异常名称前缀,进行协同防御。与其他方法对比分析结果表明,所提出的基于前缀识别的兴趣泛洪攻击防御方法可以准确地识别异常名称前缀,并快速抑制异常兴趣包的传输,而不影响合法兴趣包的速率。As for the interest flooding attack in Content-Centric Networking （CCN）, this study proposes a new approach to mitigate interest flooding attack based on abnormal name prefix identification. This study utilizes the forwarding state in CCN routers to detect the interest flooding and identify abnormal name prefixes, and collaboratively defense the attack by sending the identified name prefixes to neighbors. Comparison between results of the proposed approach and others, the proposed approach is able to identify the abnormal name prefixes exactly, and quickly suppress malicious interest flooding without reducing the rate of normal interests.

关 键 词：内容中心网络 兴趣包泛洪 前缀识别 协同防御 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]