一种基于接口异常度可信判断的内容中心网络缓存污染-北京邮电大学.PDF

2017年12月 北 京 邮 电 大 学 学 报 Dec.2017 第40卷 第6期 Journal of Beijing University of Posts and Telecommunications Vol.40 No.6 摇 摇 文章编号:1007鄄5321(2017)06鄄0014鄄05 DOI:10.13190/ j.jbupt.2017鄄104 一种基于接口异常度可信判断的内容中心网络缓存 污染防御方法 朱摇 轶,摇 王新平,摇 黄茹辉,摇 康浩浩,摇 曹清华 (江苏大学 计算机科学与通信工程学院,江苏 镇江212013) 摘要:针对内容中心网络的缓存污染攻击问题,提出一种基于接口异常度可信判断的限速机制,根据接口异常度检 测缓存污染攻击类型,并结合接口命中率对异常接口进行限速控制. 仿真结果表明,该机制可以同时防御缓存恶意 侵占(Locality鄄Disruption)和虚假内容缓存(False鄄Locality)2种攻击,且通过引入False鄄Locality攻击的可信度判断, 可大概率区分异常的False鄄Locality攻击和正常的突发拥塞事件,避免错误抑制Flash Crowd 网络行为. 关摇 键摇 词:缓存污染攻击;防御方法;接口限速;突发拥塞;可信判断 中图分类号:TP391摇 摇 摇 摇 文献标志码:A A Cache Pollution Defense Mechanism Based on Trust Judgment of Face Abnormality in Content Centric Networking ZHU Yi,摇 WANG Xin鄄ping,摇 HUANG Ru鄄hui,摇 KANG Hao鄄hao,摇 CAO Qing鄄hua (School of Computer Science and Communication Engineering,Jiangsu University,Jiangsu Zhenjiang212013,China) Abstract:To solve the problem of cache pollution attack in content centric networking,a traffic limiting control mechanism was proposed based on trustedjudgment of face abnormality. By detecting the abnor鄄 mality status of eachface,thetrafficof abnormalfacewaslimitedaccordingtoitsrequesthitprobability. Simulations show that,this mechanism can defend against both locality鄄disruption and false鄄locality at鄄 tacks. In addition,using the trust judgment of face abnormality,the false鄄locality attack can be distin鄄 guishedfromtheflash crowdeventwithlargeprobability. So,it can avoidmistakenly restrainingthenor鄄 mal network behavior. Key words:cache pollution attack;defense mechanism;face acceptance limitation;flash crowd;trust judgment 摇 摇 缓存污染攻击是内容中心网络(CCN,content 斥网络中存储的用户关注内容,破坏网络性能.