Poseidon: Mitigating interest flooding DDoS attacks in named data networking

Proceedings - Conference on Local Computer Networks, LCN

Volumn , Issue , 2013, Pages 630-638

  Compagno, Alberto ^a   Conti, Mauro ^a,c   Gasti, Paolo ^b,c   Tsudik, Gene ^c  

^a UNIVERSITY OF PADOVA   (Italy)

^b NEW YORK INSTITUTE OF TECHNOLOGY   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ARCHITECTURE; FLOODS; INTERNET; NETWORK ARCHITECTURE; NETWORK SECURITY;

ARCHITECTURAL FEATURES; CONTENT-CENTRIC NETWORKINGS; DISTRIBUTED DENIAL OF SERVICE ATTACK; EXTENSIVE SIMULATIONS; FUTURE INTERNET ARCHITECTURE; INTERNET ARCHITECTURE; INTERNET INFRASTRUCTURE; NAMED DATA NETWORKINGS;

INTERNET PROTOCOLS;

EID: 84898024191     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LCN.2013.6761300     Document Type: Conference Paper

References (34)

1. A. Afanasyev, P. Mahadevan, I. Moiseenko, E. Uzun, and L. Zhang. Interest flooding attack and countermeasures in Named Data Networking. In IFIP Networking, 2013.
2. A. Afanasyev, I. Moiseenko, and L. Zhang. ndnSIM: NDN simulator for NS-3. Technical Report NDN-0005, 2012, University of California, Los Angeles, Jun 2012.
3. G. Carl, G. Kesidis, R. R. Brooks, and S. Rai. Denial-of-service attackdetection techniques. IEEE Internet Computing, 10(1):82-89, jan 2006.
4. Content centric networking (CCNx) project. http://www.ccnx.org.
5. CCNx protocol. http://www.ccnx.org/releases/latest/doc/technical/ CCNxProtocol.html.
6. Y. Chen, K. Hwang, and W.-S. Ku. Collaborative detection of ddos attacks over multiple network domains. IEEE TPDS, 18(12):1649-1662, 2007. (Pubitemid 350142414)
7. ChoiceNet-Evolution through Choice. https://code.renci.org/gf/project/ choicenet/. Retrieved Jul. 2012.
8. A. Compagno, M. Conti, P. Gasti, and G. Tsudik. POSTER: NDN interest flooding attacks and countermeasures. In ACSAC, 2012.
9. M. Conti, P. Gasti, and M. Teoli. A lightweight mechanism for detection of cache pollution attacks in named data networking. Journal on Computer Networks (COMNET), 2013.
10. H. Dai, Y. Wang, J. Fan, and B. Liu. Mitigate ddos attacks in ndn by interest traceback. In NOMEN, 2013.
11. NS3 DCE CCNx. http://www-sop.inria.fr/members/Frederic.Urbani/ns3dceccnx/ getting-started.html.
12. (NSF) future of internet architecture (FIA) program. http://www.nets-fia. net/.
13. P. Gasti, G. Tsudik, E. Uzun, and L. Zhang. DoS and DDoS in named-data networking. Technical report, University of California, Irvine, 2012.
14. C. Gkantsidis and P. Rodriguez. Cooperative security for network coding file distribution. In INFOCOM, 2006.
15. O. Heckmann, M. Piringer, J. Schmitt, and R. Steinmetz. On realistic network topologies for simulation. In ACM MoMeTools, pages 28-32, 2003.
16. J. Ioannidis and S. M. Bellovin. Implementing pushback: Router-based defense against ddos attacks. In NDSS, 2002.
17. Low Orbit ION Cannon project on SourceForge. http://sourceforge.net/ projects/loic/.
18. V. Jacobson, D. Smetters, N. Briggs, M. Plass, J. Thornton, and R. Braynard. Voccn: Voice-over content centric networks. In ReArch, 2009.
19. J.-H. Jun, H. Oh, and S.-H. Kim. Ddos flooding attack detection through a step-by-step investigation. Networked Embedded Systems for Enterprise Applications, 10:1-5, 2011.
20. U. Lee, I. Rimac, and V. Hilt. Greening the internet with content-centric networking. In e-Energy, pages 179-182, 2010.
21. L. Lu, M. C. Chan, and E.-C. Chang. A general model of probabilistic packet marking for ip traceback. In ASIACCS, pages 179-188, 2008.
22. MobilityFirst FIA Overview. http://mobilityfirst.winlab.rutgers.edu.
23. Named data networking project (NDN). http://named-data.org.
24. Nebula. http://nebula.cis.upenn.edu.
25. NS-3. http://www.nsnam.org.
26. V. Paxson. An analysis of using reflectors for distributed denial-ofservice attacks. ACM SIGCOMM CCR, 31(3):38-47, 2001. (Pubitemid 33586487)
27. V. Ramasubramanian and E. Sirer. Perils of transitive trust in the domain name system. In IMC, 2005.
28. E. J. Rosensweig, J. Kurose, and D. Towsley. Approximate models for general cache networks. In INFOCOM, pages 1100-1108, 2010.
29. R. Stone. Centertrack: An ip overlay network for tracking dos floods. USENIX SSYM, pages 15-15, 2000.
30. U. Tupakula and V. Varadharajan. A practical method to counteract denial of service attacks. In ACSC, pages 275-284, 2003.
31. M. Wahlisch, T. C. Schmidt, and M. Vahlenkamp. Backscatter from the data plane- threats to stability and security in information-centric networking. CoRR, abs/1205.4778, 2012.
32. H. Wang, D. Zhang, and K. G. Shin. Detecting syn flooding attacks. In INFOCOM, pages 1530-1539, 2002.
33. XIA-eXpressive Internet Architecture. http://www.cs.cmu.edu/xia/.
34. M. Xie, I. Widjaja, and H. Wang. Enhancing cache robustness for content-centric networks. In INFOCOM, 2012.