LIVE: Lightweight integrity verification and content access control for named data networking

IEEE Transactions on Information Forensics and Security

Volumn 10, Issue 2, 2015, Pages 308-320

  Li, Qi ^a   Zhang, Xinwen ^b   Zheng, Qingji ^c   Sandhu, Ravi ^d   Fu, Xiaoming ^e  

^a TSINGHUA UNIVERSITY   (China)

^b SAMSUNG RESEARCH AMERICA   (United States)

^c Huawei Research Center   (United States)

^d UNIVERSITY OF TEXAS AT SAN ANTONIO   (United States)

^e UNIVERSITY OF GÖTTINGEN   (Germany)

Author keywords

access control; data security; Next generation networking

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY; DENIAL-OF-SERVICE ATTACK; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; NETWORK SECURITY; NEXT GENERATION NETWORKS; SECURITY OF DATA;

CONTENT ACCESS CONTROLS; INTEGRITY VERIFICATIONS; LOCATION INDEPENDENT; NAMED DATA NETWORKINGS; NEXT GENERATION NETWORKING; PUBLIC-KEY SIGNATURES; SIGNATURE VERIFICATION; VERIFICATION ALGORITHMS;

ACCESS CONTROL;

EID: 84921416301     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2014.2365742     Document Type: Article

References (30)

1. V. Jacobson, D. K. Smetters, J. D. Thornton, M. Plass, N. Briggs, and R. Braynard, "Networking named content," Commun. ACM, vol. 55, no. 1, pp. 117-124, 2012.
2. N. Fotiou, G. F. Marias, and G. C. Polyzos, "Access control enforcement delegation for information-centric networking architectures," in Proc. ACM SIGCOMM Workshop Inf.-Centric Netw., 2012, pp. 85-90.
3. R. C. Merkle, "A digital signature based on a conventional encryption function," in Proc. CRYPTO, 1987, pp. 369-378.
4. K. Zhang, "Efficient protocols for signing routing messages," in Proc. NDSS, 1998, pp. 1-7.
5. The Content Centric Networking (CCNx) Project. [Online]. Available: http://www.ccnx.org/, accessed 2012.
6. S. DiBenedetto, P. Gasti, G. Tsudik, and E. Uzun, "ANDaNA: Anonymous named data networking application," in Proc. NDSS, 2012. [Online] Available: http://www.internetsociety.org/andana-anonymousnamed-data-networking-application
7. P. Gasti, G. Tsudik, E. Uzun, and L. Zhang, "DoS and DDoS in named data networking," in Proc. ICCCN, 2013, pp. 1-7.
8. A. K. Maji and S. Bagchi, "CAPS: A confidentiality and anonymity preserving routing protocol for content-based publish-subscribe networks," in Security and Privacy in Communication Networks. Berlin, Germany: Springer-Verlag, 2011.
9. M. Nabeel, N. Shang, and E. Bertino, "Efficient privacy preserving content based publish subscribe systems," in Proc. 7th ACM SACMAT, 2012, pp. 133-144.
10. H. Chang, S. Jamin, and W. Willinger, "To peer or not to peer: Modeling the evolution of the internet's as-level topology," in Proc. 25th IEEE INFOCOM, Apr. 2006, pp. 1-12.
11. L. Gong, "A secure identity-based capability system," in Proc. IEEE Symp. Secur. Privacy, May 1989, pp. 56-63.
12. J. S. Shapiro, J. M. Smith, and D. J. Farber, "EROS: A fast capability system," in Proc. 17th ACM SOSP, 1999, pp. 170-185.
13. H. Krawczyk, M. Bellare, and R. Canetti. (Feb. 1997). HMAC: Keyed-Hashing for Message Authentication. RFC 2014, IETF. [Online]. Available: https://tools.ietf.org/html/rfc2104
14. X. Zhang, H.-C. Hsiao, G. Hasker, H. Chan, A. Perrig, and D. G. Andersen, "SCION: Scalability, control, and isolation on nextgeneration networks," in Proc. IEEE Symp. Secur. Privacy, May 2011, pp. 212-227.
15. G. Huston and R. Bush, "Securing BGP and SIDR," IETF J., vol. 7, no. 1, 2011. [Online]. Available: http://www.internetsociety. org/articles/securing-bgp-and-sidr
16. M. Bellare and P. Rogaway, "Random oracles are practical: A paradigm for designing efficient protocols," in Proc. 1st ACM Conf. CCS, 1993, pp. 62-73.
17. The OpenSSL Project. [Online]. Available: http://www.openssl.org/
18. X. Zhang, Z. Zhou, G. Hasker, A. Perrig, and V. Gligor, "Network fault localization with small TCB," in Proc. 19th IEEE ICNP, Oct. 2011, pp. 143-154.
19. A. Afanasyev, P. Mahadevany, I. Moiseenko, E. Uzuny, and L. Zhang, "Interest flooding attack and countermeasures in named data networking," in Proc. IFIP Netw. Conf, May 2013, pp. 1-9.
20. A. Mohaisen, X. Zhang, M. Schuchard, H. Xie, and Y. Kim, "Protecting access privacy of cached contents in information centric networks," in Proc. 8th ACM ASIACCS, 2013, pp. 173-178.
21. G. Acs, M. Conti, P. Gasti, C. Ghali, and G. Tsudik, "Cache privacy in named-data networking," in Proc. IEEE 33rd ICDCS, Jul. 2013, pp. 41-51.
22. T. Lauinger, N. Laoutaris, P. Rodriguez, T. Strufe, E. Biersack, and E. Kirda, "Privacy risks in named data networking: What is the cost of performance?" ACM SIGCOMM Comput. Commun. Rev., vol. 42, no. 5, pp. 54-57, Sep. 2012.
23. G. Bianchi, A. Detti, A. Caponi, and N. Blefari-Melazzi, "Check before storing: What is the performance price of content integrity verification in LRU caching?" ACM SIGCOMM Comput. Commun. Rev., vol. 43, no. 3, pp. 59-67, 2013.
24. A. Detti, A. Caponi, G. Tropea, G. Bianchi, and N. Blefari-Melazzi, "On the interplay among naming, content validity and caching in information centric networks," in Proc. IEEE GLOBECOM, Dec. 2013, pp. 2108-2113.
25. D. Goergen, T. Cholez, J. Francois, and T. Engel, "A semantic firewall for content-centric networking," in Proc. IFIP/IEEE Int. Symp. Integr. Netw. Manage. (IM), May 2013, pp. 478-484.
26. L. Deng, Y. Gao, Y. Chen, and A. Kuzmanovic, "Pollution attacks and defenses for internet caching systems," Comput. Netw., vol. 52, no. 5, pp. 935-956, 2008.
27. M. Conti, P. Gasti, and M. Teoli, "A lightweight mechanism for detection of cache pollution attacks in named data networking," Comput. Netw., vol. 57, no. 16, pp. 3178-3191, 2013.
28. A. Compagno, M. Conti, P. Gasti, and G. Tsudik, "Poseidon: Mitigating interest flooding DDoS attacks in named data networking," in Proc. IEEE 38th Conf. LCN, Oct. 2013, pp. 630-638.
29. S. Arianfar, T. Koponen, B. Raghavan, and S. Shenker, "On preserving privacy in content-oriented networks," in Proc. ACM SIGCOMM Workshop Inf.-Centric Netw., 2011, pp. 19-24.
30. T. Koponen et al., "A data-oriented (and beyond) network architecture," in Proc. SIGCOMM, 2007, pp. 181-192.