Towards a security monitoring plane for named data networking and its application against content poisoning attack

Abstract : Named Data Networking (NDN) is the most mature proposal of the Information Centric Networking paradigm, a clean-slate approach for the Future Internet. Although NDN was designed to tackle security issues inherent to IP networks natively, newly introduced security attacks in its transitional phase threaten NDN's practical deployment. Therefore, a security monitoring plane for NDN is indispensable before any potential deployment of this novel architecture in an operating context by any provider. We propose an approach for the monitoring and anomaly detection in NDN nodes leveraging Bayesian Network techniques. A list of monitored metrics is introduced as a quantitative measure to feature the behavior of an NDN node. By leveraging the hypothesis testing theory, a micro detector is developed to detect whenever the metric significantly changes from its normal behavior. A Bayesian network structure that correlates alarms from micro detectors is designed based on the expert knowledge of the NDN specification and the NFD implementation. The relevance and performance of our security monitoring approach are demonstrated by considering the Content Poisoning Attack (CPA), one of the most critical attacks in NDN, through numerous experiment data collected from a real NDN deployment.
Document type :
Conference papers
Complete list of metadatas

https://hal-utt.archives-ouvertes.fr/hal-02274867
Contributor : Jean-Baptiste Vu Van <>
Submitted on : Friday, August 30, 2019 - 11:55:21 AM
Last modification on : Thursday, September 26, 2019 - 12:29:10 PM

Identifiers

  • HAL Id : hal-02274867, version 1

Collections

Citation

Hoang Long Mai, Tan Ngoc Nguyen, Guillaume Doyen, Rémi Cogranne, Wissam Mallouli, et al.. Towards a security monitoring plane for named data networking and its application against content poisoning attack. NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium, Apr 2018, Taipei, Taiwan. pp.1-9. ⟨hal-02274867⟩

Share

Metrics

Record views

15