Towards a security monitoring plane for named data networking and its application against content poisoning attack - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

Towards a security monitoring plane for named data networking and its application against content poisoning attack

Résumé

Named Data Networking (NDN) is the most mature proposal of the Information Centric Networking paradigm, a clean-slate approach for the Future Internet. Although NDN was designed to tackle security issues inherent to IP networks natively, newly introduced security attacks in its transitional phase threaten NDN's practical deployment. Therefore, a security monitoring plane for NDN is indispensable before any potential deployment of this novel architecture in an operating context by any provider. We propose an approach for the monitoring and anomaly detection in NDN nodes leveraging Bayesian Network techniques. A list of monitored metrics is introduced as a quantitative measure to feature the behavior of an NDN node. By leveraging the hypothesis testing theory, a micro detector is developed to detect whenever the metric significantly changes from its normal behavior. A Bayesian network structure that correlates alarms from micro detectors is designed based on the expert knowledge of the NDN specification and the NFD implementation. The relevance and performance of our security monitoring approach are demonstrated by considering the Content Poisoning Attack (CPA), one of the most critical attacks in NDN, through numerous experiment data collected from a real NDN deployment.

Mots clés

Fichier principal
Vignette du fichier
article.pdf (491.24 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02407659 , version 1 (12-12-2019)

Identifiants

Citer

Hoang Long Mai, Tan Nguyen, Guillaume Doyen, Rémi Cogranne, Wissam Mallouli, et al.. Towards a security monitoring plane for named data networking and its application against content poisoning attack. NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium, 2018, Taipei, Taiwan. ⟨10.1109/noms.2018.8406246⟩. ⟨hal-02407659⟩
24 Consultations
129 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More