콘텐츠 중심 네트워크를 위한 안전한 패킷 단편화 기술
Secure Fragmentation Technique for Content-Centric Networking
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
본 논문에서는 콘텐츠 중심 네트워크(CCN, Content-Centric Networking)를 위한 안전한 패킷 단편화(fragmentation) 기술을 제안한다. 제안하는 기술은 패킷조각(fragment)들에 대한 불법적인 위변조 가능성을 차단하고, 패킷조각 수신 시 높은 확률로 즉각적인 신뢰성 검증을 제공함으로써 검증 지연을 악용한 DoS 공격으로부터 높은 안전성을 제공한다. 본 논문의 성능 분석 결과는 약간의 부하 증가만으로 제안하는 기술이 기존 기술보다 훨씬 더높은 안전성을 제공함을 보여준다.
Abstract
This paper presents a secure and DoS-resistant fragment authentication technique for Content-Centric Networking (CCN). Our approach not only guarantees the authenticity of each fragment, but also provides a high resistance to DoS attacks through the immediate verification of fragment authenticity at interim nodes on the routing path. Our experimental results demonstrate that the proposed approach provides much stronger security than the existing approach, without imposing a significant overhead.
참고문헌 (7)
- V. Jacobson, "Networking named content", Proceedings of ACM International Conference on Emerging Networking Experiments and Technologies, pp.1~12 (2009)
- C. Ghali, "Secure fragmentation for content-centric networks", Proceedings of IEEE International Symposium on Network Computing and Applications, pp.47~56 (2015)
- Michael O. Rabin, "Efficient dispersal of information for security, load balancing and fault tolerance", Journal of the Association for Computing Machinery, 36(2), pp.335~348 (1989)
- J. Deng, "Secure code distribution in dynamically programmable wireless sensor networks", Proceedings of International Conference on Information Processing in Sensor Networks, pp.292~300 (2006)
- A. Perrig, "Efficient and secure source authentication for multicast", Network and Distributed System Security Symposium, pp.35~46 (2001)
- L. Rizzo, "Effective erasure codes for reliable computer communication protocols", ACM SIGCOMM Computer Communication Review, 27(2), pp.24~36 (1997)
- Named data networking(NDN)project, "L. Zhang", Xerox Palo Alto Research Center, ~, pp.NDN-0001 (2010)