命名数据网络中Interest洪泛攻击检测与防御  

Detection and Countermeasure of Interest Flooding Attack in Named Data Networking

作　　者：邢光林[1] 李亚 韩敏 侯睿[1] Xing Guanglin;Li Ya;Han Min;Hou Rui(College of Computer Sciences,South-Central University for Nationalities,Wuhan 430074,China)

机构地区：[1]中南民族大学计算机科学学院,武汉430074

出　　处：《中南民族大学学报（自然科学版）》2018年第3期134-139,共6页Journal of South-Central University for Nationalities：Natural Science Edition

基　　金：国家自然科学基金资助项目(60841001);中央高校基本科研业务费专项基金资助项目(CZD18003)

摘　　要：根据命名数据网络使用数据名称进行数据转发的特性,目前NDN中出现了一种基于兴趣包洪泛攻击的分布式拒绝服务攻击,对NDN网络危害较大.针对IFA,提出了一种基于Poseidon的改进方法——PAP,检测NDN路由器接口是否存在IFA,并构建interest包超时未响应表判断疑似恶意前缀.若存在IFA,则概率性限制该接口接收名称包含疑似恶意前缀的interest包速率,仿真结果表明PAP能够有效缓解IFA.According to the characteristics that named data networking(NDN)use the name of content for data forwarding,a distributed denial of service attack based on interest flooding attack(IFA)appears in NDN,which is harmful to NDN network.An improved Poseidon method named PAP is proposed for IFA,which detects whether the NDN router interface is under IFA,constructs an overtime unresponsive interest table to judge the suspected malicious prefix.If IFA is existed,the interface receives interest packet with a certain probability which containing suspected malicious prefix.Simulation results show that PAP can detect and mitigate IFA efficiently.

关 键 词：命名数据网络 兴趣包洪泛攻击 分布式拒绝服务 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]