信息中心网络架构NetInf安全性改进研究  

Research on improvement of information-centric networking architecture for NetInf security

作　　者：刘解放[1,2] 赵斌[3] 周宁[1] 

机构地区：[1]盐城工学院信息工程学院,江苏盐城224051 [2]江南大学数字媒体学院,江苏无锡214122 [3]北京工业大学软件学院,北京100022

出　　处：《计算机应用研究》2015年第11期3416-3420,3429,共6页Application Research of Computers

基　　金：国家自然科学基金资助项目(61272500)

摘　　要：信息中心网络(information-centric networking,ICN)已经成为下一代网络架构研究的新热点。针对NetInf(network of information)架构下,由于无效的数据注册,NRS在发布阶段容易受伪装和内容投毒攻击,提出在发布和检索之前增加一个注册阶段,并集成认证和授权方案;该阶段在主机访问Net Inf系统之前,对其进行身份认证并采用基于能力的访问策略来解决未经授权的访问问题。通过形式化方法验证,该方法提高了Net Inf框架的安全性。Information-eentric networking（ICN） has been a novel hotspot in the field of future Internet architecture. Aiming at NRS is vulnerable to masquerading and content poisoning attacks in the NetInf, because of invalid data registration, this paper proposed a registration stage, which integrated authentication and authorization scheme and took place before the publication and retrieval. The stage authenticated hosts before they accessed the NetInf system. In addition, the registration stage used the capability-based access policies to solve the problem of unauthorized access. It formally verified the proposed schemes by using formal methods. The results show the schemes improves the security of the NetInf framework.

关 键 词：信息网络 信息中心网络 形式化方法 身份认证 授权 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]