改进的CCN兴趣包泛洪攻击防御方法  

Improved defense method for interest flooding attack in CCN

作　　者：吴浔 凌捷[1] Wu Xun;Ling Jie(School of Computer,Guangdong University of Technology,Guangzhou 510006,China)

机构地区：[1]广东工业大学计算机学院,广州510006

出　　处：《计算机应用研究》2020年第4期1132-1135,共4页Application Research of Computers

基　　金：广东省科技计划资助项目(2017B090906003);广州市重大科技专项资助项目(201604010063,201802010043,201807010058)。

摘　　要：为了提高内容中心网络(CCN)防御兴趣包泛洪攻击(IFA)的能力,针对不同防御方法进行了研究,提出一种改进的CCN兴趣包泛洪攻击防御方法。该方法根据CCN流平衡原理,采用恶意前缀溯源的方式,实现对IFA的快速检测,并通过改进和式增加积式减少(additive increase multi-plicative decrease,AIMD)算法,实现对IFA的防御。安全性分析表明,该方法在面对IFA时,能够更快地做出反应;并且相比于其他IFA防御方法,该方法在保证安全性的前提下,降低了CCN路由器在检测IFA时的计算开销。In order to improve the ability of CCN to defend against IFA,this paper studied different defense methods and proposed an improved defense method for IFA in CCN.According to the CCN flow balance principle,the me-thod used the me-thod of malicious prefix tracing to achieve fast detection of IFA,and achieved the defense against IFA by improving the AIMD algorithm.The security analysis shows that the proposed method can defend faster when it in the face of IFA.Compared with other defense methods,this method reduces the computational cost of the CCN router when detecting IFA under the premise of ensuring security.

关 键 词：兴趣包泛洪攻击 恶意前缀溯源 内容中心网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]