内容中心网络下基于前缀识别的兴趣包泛洪攻击防御-电子与信息学报.pdfVIP

第36 卷第7 期 电 子 与 信 息 学 报 Vol.36No.7 2014 年7 月 Journal of Electronics Information Technology Jul. 2014 内容中心网络下基于前缀识别的兴趣包泛洪攻击防御方法 唐建强* 周华春 刘 颖 张宏科 (北京交通大学电子信息工程学院 北京 100044) 摘 要：针对内容中心网络(Content-Centric Networking, CCN)下的兴趣包泛洪攻击问题，该文提出基于异常名称 前缀识别的协同反馈防御方法。利用CCN 中路由器维持的兴趣包转发状态检测兴趣包泛洪攻击，识别异常名称前 缀，并向相邻节点发送异常名称前缀，进行协同防御。与其他方法对比分析结果表明，所提出的基于前缀识别的 兴趣泛洪攻击防御方法可以准确地识别异常名称前缀，并快速抑制异常兴趣包的传输，而不影响合法兴趣包的速 率。 关键词：内容中心网络；兴趣包泛洪；前缀识别；协同防御 中图分类号：TP393.03 文献标识码：A 文章编号：1009-5896(2014)07-1735-08 DOI: 10.3724/SP.J.1146.2013.01770 Mitigating Interest Flooding Attack Based on Prefix Identification in Content-centric Networking Tang Jian-qiang Zhou Hua-chun Liu Ying Zhang Hong-ke (School of Electronic and Information Engineering, Beijing Jiaotong University, Beijing 100044, China) Abstract: As for the interest flooding attack in Content-Centric Networking (CCN), this study proposes a new approach to mitigate interest flooding attack based on abnormal name prefix identification. This study utilizes the forwarding state in CCN routers to detect the interest flooding and identify abnormal name prefixes, and collaboratively defense the attack by sending the identified name prefixes to neighbors. Comparison between results of the proposed approach and others, the proposed approach is able to identify the abnormal name prefixes exactly, and quickly suppress malicious interest flooding without reducing the rate of normal interests. Key words: Content-Centric Networking (CCN); Interest flooding; Prefix identification; Collaborative defense 1 引言 Table, PIT)。路由器为兴趣包维持转发状态的特性 内容中心网络(Content-Centric Networking,