Backscatter from the Data Plane --- Threats to Stability and Security in Information-Centric Networking

Abstract

Information-centric networking proposals attract much attention in the ongoing search for a future communication paradigm of the Internet. Replacing the host-to-host connectivity by a data-oriented publish/subscribe service eases content distribution and authentication by concept, while eliminating threats from unwanted traffic at an end host as are common in today's Internet. However, current approaches to content routing heavily rely on data-driven protocol events and thereby introduce a strong coupling of the control to the data plane in the underlying routing infrastructure. In this paper, threats to the stability and security of the content distribution system are analyzed in theory and practical experiments. We derive relations between state resources and the performance of routers and demonstrate how this coupling can be misused in practice. We discuss new attack vectors present in its current state of development, as well as possibilities and limitations to mitigate them.

15 pages

References in corpus (1)

• Poseidon: Mitigating Interest Flooding DDoS Attacks in Named Data Networking

Cited by in corpus (11)

• Information Centric Networking in the IoT: Experiments with NDN in the Wild
• Poseidon: Mitigating Interest Flooding DDoS Attacks in Named Data Networking
• A Survey on Honeypot Software and Data Analysis
• NDN, CoAP, and MQTT: A Comparative Measurement Study in the IoT
• ELDA: Towards Efficient and Lightweight Detection of Cache Pollution Attacks in NDN
• Gain More for Less: The Surprising Benefits of QoS Management in Constrained NDN Networks
• ADN: An Information-Centric Networking Architecture for the Internet of Things
• Security and Privacy in Future Internet Architectures - Benefits and Challenges of Content Centric Networks
• Why We Shouldn't Forget Multicast in Name-oriented Publish/Subscribe
• Security and Privacy Analysis of NSF Future Internet Architectures
• Covert Ephemeral Communication in Named Data Networking