基于区块链的命名数据网络内容毒化攻击抵御机制  

Blockchain-based content poisoning attacks defense mechanism in named data networking

作　　者：郭江 王淼[1] 许志伟[1] 张瀚文[1] 张玉军[1,2] Guo Jiang;Wang Miao;Xu Zhiwei;Zhang Hanwen;Zhang Yujun(Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100190;University of Chinese Academy of Sciences, Beijing 100049)

机构地区：[1]中国科学院计算技术研究所,北京100190 [2]中国科学院大学,北京100049

出　　处：《高技术通讯》2020年第11期1104-1112,共9页Chinese High Technology Letters

基　　金：国家重点研发(2018YFB1800403,2016YFE0121500);国家自然科学基金(61902382,61972381,61672500,61572474);中国科学院战略性先导科技专项(XDC02030500)资助项目。

摘　　要：本文提出了一种基于区块链内容毒化攻击抵御机制(BlockIKB)。该机制在边缘路由器上引入区块链数据库,存储内容名字和发布者公钥摘要的绑定信息,在内容获取过程中,用户可以就近从边缘路由器获取发布者的公钥摘要,路由器根据公钥摘要验证内容,从而抵御毒化内容。与已有机制相比,本文机制能够抵御内容毒化攻击。构建了分布式数据库,避免了用户集中获取公钥摘要导致的拥塞问题;提供了就近公钥摘要获取服务,提升了内容获取效率。安全分析证明该机制能够抵御内容毒化攻击,实验结果表明,该机制能够减轻服务器负载,提升内容获取效率。This paper proposes a blockchain-based content poisoning attacks defense mechanism(BlockIKB).Blockchain database is introduced into the edge routers which collect binding information including the content name and producer’s public-key digest.In content retrieval process,consumers pre-acquire producer’s public-key digest from their nearby edge routers.Then,according to this public-key digest,in-network routers validate incoming content to defense fake content.Compared with the existing solutions,the proposed solution can defense content poisoning attacks.Constructing a distributed database,it avoids congestion problem caused by consumers centralized acquisition.In addition,it improves the consumer’s efficiency in retrieving content by providing a nearby acquisition service of public-key digests.Security analysis shows that the proposed solution can defense content poisoning attacks.The experimental results confirm that this solution can mitigate server load and improve the consumer’s efficiency in retrieving content.

关 键 词：命名数据网络(NDN) 内容毒化攻击(CPA) 摘要验证 区块链 分布式数据库 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]