A Security Monitoring Plane for Named Data Networking Deployment - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue IEEE Communications Magazine Année : 2018

A Security Monitoring Plane for Named Data Networking Deployment

Résumé

NDN is the most mature proposal of the ICN paradigm, a clean-slate approach for the Future Internet. Although NDN was designed to natively tackle security issues inherent to IP networks, it also introduces new security threats that may prevent its practical deployment by telco operators. Therefore, designing and implementing a dedicated security monitoring plane is essential to enable such future deployment. In this article, we present a set of contributions in this area. It first consists of featuring significant NDN attacks in a real operating context to evaluate their actual impact. Then, by analyzing the NFD data plane pipelines, we present a monitoring plane design that captures the state of NDN nodes by instrumenting 18 metrics with dedicated probes. We then correlate these metrics with a Bayesian network, which allows the detection of potential abnormal behaviors. To validate our approach, we demonstrate the efficiency of our monitoring plane in the detection of content poisoning attacks and interest flooding attacks in a testbed carrying real traffic.

Mots clés

Fichier principal
Vignette du fichier
article.pdf (844.54 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02407673 , version 1 (12-12-2019)

Identifiants

Citer

Tan Nguyen, Hoang-Long Mai, Guillaume Doyen, Rémi Cogranne, Wissam Mallouli, et al.. A Security Monitoring Plane for Named Data Networking Deployment. IEEE Communications Magazine, 2018, 56 (11), pp.88-94. ⟨10.1109/mcom.2018.1701135⟩. ⟨hal-02407673⟩
81 Consultations
194 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More