首页> 外文会议>International Conference on Advanced Communication Technology >Defend against Internet censorship in named data networking
【24h】

Defend against Internet censorship in named data networking

机译:防御命名数据网络中的Internet审查

获取原文

摘要

Named Data Networking (NDN), as a promising next generation network, has several advantages in scalability, mobility and network efficiency compared with IP-based Inter-net. These advantages come with the usage of named content, powerful routers and intermediate cache. These, however, make censorship in NDN more easily to deploy. In this paper we give an analysis of the possible censorship techniques in NDN and come up with two most effective attacks: name-watchlist attack and deep packet inspection. Existing solutions against censorship in IP-based network and NDN either cannot defend against both attacks or disable the cache mechanism, thus decrease the network efficiency. We propose a scheme which adopts the idea of proxy web servers and brings in the concept of smart routers to partially persevere the functionality of intermediate cache and improve network performance. Security analysis shows that as long as the consumer can connect to a smart router which performs a second-time disguise of the requested name without going through a compromised smart router, he can retrieve his interested Data packet. Simulation result shows that the usage of smart routers helps mitigate the performance overhead to disguise Interest names and Data content.
机译:与基于IP的Internet相比,命名数据网络(NDN)作为有希望的下一代网络,在可伸缩性,移动性和网络效率方面具有多项优势。这些优势来自命名内容的使用,功能强大的路由器和中间缓存。但是,这些使NDN中的审查更加容易部署。在本文中,我们对NDN中可能的检查技术进行了分析,并提出了两种最有效的攻击:名称监视攻击和深度数据包检查。现有的基于IP网络和NDN的审查制度解决方案要么无法抵御这两种攻击,要么无法禁用缓存机制,从而降低了网络效率。我们提出了一种方案,该方案采用了代理Web服务器的思想,并引入了智能路由器的概念,以部分持久化中间缓存的功能并提高网络性能。安全分析表明,只要消费者可以连接到执行第二次伪装所请求名称的智能路由器,而无需通过受损的智能路由器,他就可以检索他感兴趣的数据包。仿真结果表明,智能路由器的使用有助于减轻掩盖兴趣名称和数据内容的性能开销。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号