Advanced Interest Flooding Attacks in Named-Data Networking - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

Advanced Interest Flooding Attacks in Named-Data Networking

Résumé

The Named-Data Networking (NDN) has emerged as a clean-slate Internet proposal on the wave of Information-Centric Networking. Although the NDN's data-plane seems to offer many advantages, e.g., native support for multicast communications and flow balance, it also makes the network infrastructure vulnerable to a specific DDoS attack, the Interest Flooding Attack (IFA). In IFAs, a botnet issuing unsatisfiable content requests can be set up effortlessly to exhaust routers' resources and cause a severe performance drop to legitimate users. So far several countermeasures have addressed this security threat, however, their efficacy was proved by means of simplistic assumptions on the attack model. Therefore, we propose a more complete attack model and design an advanced IFA. We show the efficiency of our novel attack scheme by extensively assessing some of the state-of-the-art countermeasures. Further, we release the software to perform this attack as open source tool to help design future more robust defense mechanisms.
Fichier principal
Vignette du fichier
main.pdf (1.4 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01636494 , version 1 (16-11-2017)

Identifiants

  • HAL Id : hal-01636494 , version 1

Citer

Salvatore Signorello, Samuel Marchal, Jerome Francois, Olivier Festor, Radu State. Advanced Interest Flooding Attacks in Named-Data Networking. NCA 2017 - IEEE International Symposium on Network Computing and Applications, Oct 2017, Cambridge, United States. ⟨hal-01636494⟩
198 Consultations
608 Téléchargements

Partager

Gmail Facebook X LinkedIn More