Named Data Networking approach is used to quickly deliver packets over the internet with reliability and security based on the content instead of IP address. For this purpose, it introduced new architecture where the design ideologies are acquired from the current successful fast internet. Since, it uses data names instead of IP addresses for data requesting, forwarding, and retrieval. Further, it is also efficient to manage large-scale internet access without congestion. Overall, it overcomes the limitations of active internet architectural issues.
This page is about Security Attacks in Named Data Networking A Review and Research Directions!!!
Although there are many benefits to the NDN approach, it still has several limitations in real-time deployment. The major concerns of the NDN approach are the selection of optimal route/path for data forwarding, data privacy, and data security. Therefore, here we have given a detailed explanation of these NDN challenges. To tackle these challenges, our resource team has developed several solutions from different perspectives. All these solutions are sure to solve these problems effectively and precisely.
Fundamental Challenges of NDN
- Routing
- Scalability issue in NDN is majorly raised up from routing
- In existing IP address method, it has limited space but in NDN, it has unlimited space but manage through hierarchical names
- While global routing, NDN effectively achieve name space similar to IP-prefix aggregation
- Enable routing to use suitable state than IP’s exact state in NDN delivery model. So, it minimizes routing complexity than IP method
- Privacy and Security
- Compare to transmission security, data security is different
- NDN approach is mainly the data-intensive approach which protects data by object name
- To achieve maximum security, it follows user-centric security policies which represent user’s application context / data model
- More than IP-based security researches, NDN-based data security researches are growing fast over couple of decades
Security and Privacy in NDN
Generally, secure content distribution is considered to be one of the complex issues in NDN. Since, multimedia content like video, images, and audio create more network traffic in existing models. So, the threats of vulnerabilities gradually increase in the NDN model. Here, we have classified the vulnerabilities in two major aspects where one is technical and the other is physical. In addition, we have also included all possible attacks and launch points of attacks. Once you communicate with us, we provide suitable countermeasures for the below attacks.
- Technical Vulnerabilities
- Memory
- Energy Emission
- Communication Bandwidth
- Transmission Range
- Processing Power
- Resource Consumption
- Wireless Communication
- Physical Vulnerabilities
- Impersonate Attack
- Replay Attack
- Traffic Analysis
- Eavesdropping / Man in the Middle
- Node Replication Attack
- Data Alteration
- Passive Attack Monitoring
- Hardware and Software Stealing
- Illegal User Accessibility
- Denial of Services (DoS) Attack
- System Damage and Corrupt Data (using code)
In current security mechanisms, it secures communication terminals but fails to achieve security over data. In order to focus on data, NDN proposed new architecture which enforces the “data-name” technique. It makes the data producer sign the data and distribute it over the network. And, the receiver can use the producer’s public key to access the data. In this way, NDN is robust against security attacks of the TCP/IP model. Although it provides maximum security, it still may face new attacks.
This Security Attacks in Named Data Networking A Review and Research Directions article majorly discusses current NDN security attacks with their detection methods and measures. Some of the main attacks are cache pollution, interest flooding, cache privacy attacks, content positioning, etc. Furthermore, this article gives you answers to the following questions.
- By what means NDN security is varying from TCP-IP security?
- Exactly how the attackers use the features of NDN architectural and introduce new attacks?
- In what way, NDN overcomes the existing TCP-IP attacks and assure security through new architecture?
Now, we can see the major security attacks of named data networking models. In general, every networking model follows layered architecture like OSI layers to establish communication. Here, the data are transmitted over different layers from source to destination. So, we have given the possible attacks in every networking layer which ranges from physical to application.
Layerwise Security Attacks in NDN
- Physical and Data-Link Layer
- Man-in-Middle
- Selfish Attack
- Network Sniffing
- Strategy Attack
- Object Localization
- Scanning Attack (Port Scan)
- Timing Investigation
- Flow Cloning
- Cache Snooping and Observation
- Outage (congestion)
- Network Layer
- Prefix Hijacking
- Application Layer
- Content Poisoning
- Cache Pollution
- Interest Flooding
- DDoS and DoS Attack
- DNS and Session Hijack
Moreover, we have also given you a few primary security issues that affect NDN model performance. Our developers are adept to provide effective security mechanisms for all these issues by advance or hybrid technologies. For your information, we have addressed only a few primary issues based on active scholar’s current demands. Beyond these issues, we also provide you optimal techniques for other security threats/issues.
Major Issues of Security in NDN
- Adding more processes on routers
- Affect legitimate interests in NDN
- Compromise edge router to affect the performance
- High network traffic due to continuous forwarding of malicious interest
Types of Interest Flooding Attacks in NDN
With an intention to block the access of network resources for legal users, an interest flooding attack was introduced. In order to achieve this goal, this attack transmits several interest packets to make the channel busy for regular access. Further, these packets make the PIT entries in routers between source and destination. Basically, there are three main classifications in IFA as IFA using blended/existing / non-existing content. In this, the attacker sends the interest packets and gets the response from the generator through data packets. Here, we have taken the interest flooding attack (IFA) as the sample for illustration purposes.
Interest Flooding Attack Types
- Blended Content-based IFA
- bIFA
- Existing Content-based IFA
- Prefix Hijacking
- Collusive IFA
- Static and Dynamic content
- Non-Existing Content-based IFA
- cIFA
- Pre-Existing Prefic
- Random Prefix
Next, we can see about different detection methods for identifying interest flooding attacks. The first thing that needs to perform in security mechanism development is attack detection. So, we have to choose a precise technique to identify interest flooding attacks. Since there are several types of attacks as mentioned above. For your reference, here we have categorized only a few widely used pre-defined algorithms. Further, we also suggest other detection approaches based on your requirements of the application.
Detection Methods for Interest Flooding Attack
- Probabilistic Modeling
- Markov-based
- Entropy-based
- Statistical Modeling
- Fuzzy-based
- Hypothesis Testing
- Threshold-based
- Other Methods
- Machine Learning
- Micropayment-based
- Wavelet Analysis
The second thing that needs to do is to propose effective mitigation solutions. For each attack, the mitigation solution will vary based on the nature and impact of the attack. Here, we have given you some best-result yielding countermeasures for mitigating interest flooding attacks. Further, we also guide you in selecting optimal preventive/defensive measures against different types of interest flooding attacks. Our developers are precise in identifying the approaches based on attack nature and type.
Mitigation Methods for Interest Flooding Attack
- Traceback-based Measures
- Pushback-based Measures
- Other Methods
- Interest Cash
- Route Token (Cryptography-based)
- Disabling PIT Exhaustion
So far, we have discussed the different attack types, detection methods, and mitigation methods for interest flooding attacks. We hope that you understand the essentials to build the security mechanisms from our illustration. Now, we can see the common security measures for detecting general attacks in NDN. These attacks are globally common in current research of the NDN field. Further, we also support you in finding and creating security mechanisms for other attacks.
Security Approaches for Attacks Detection in NDN
- Network Access Control
- Advance DDoS Mitigation
- Traffic Shaping and Filtering
- Moving Object Defense
- Secure Traffic Observation
- Network Partition / Slicing
- Network Isolation / Multi-Tenancy
Next, we can see the different research areas for NDN security. These areas provide you extensive research platforms for current scholars who wish to create a stroke of genius in their research career. These areas offer numerous research notions which guaranteed to motivate future study. And, we have also extended our help in other research areas of NDN more than the security aspect. If you are interested to know other exciting research areas then contact our team. We let you know your requested information through comprehensive information.
Research Areas in NDN Security
- Implementation of SDN and NFV
- NDN with Vehicular Networks
- Blockchain Technology
- Edge Computing Networks
- Firewall, Honeypot and Cryptography
- Intrusion Detection and Mitigation
- Hybrid-based IDS
- Misuse-based IDS
- Anomaly-based IDS (Reinforcement and Deep Learning)
For illustration purposes, here we have addressed the content distribution area in NDN. In this, we have classified the area into three aspects as content authentication, content encryption, and content security. Moreover, we have also included the main research ideas of these aspects. Similarly, we support you in other areas by narrow downing the specific topics which match your research objectives.
Research Ideas for Security Attacks in NDN
- Content Authentication
- Include in System Architecture
- Content Encryption
- Employ Strong and Lightweight Encryption Techniques
- Content Security
- Secure content by cryptographic techniques
- Secure channel by VPN, TOR, VPN, SSH, SSL, etc.
Additionally, we have also given you the latest research directions of the NDN security attacks. In particular, knowing the future research directions is a very important step before the topic selection. Since selecting the research topic without future scope is not useful. So, it is essential to analyze the future direction of the topic for further study.
Future Research directions in NDN security
- In comparison with TCP-IP attacks, some attacks may look alike but they have distinct characterization and effect
- Most probably, many researches targets 2 security demands as privacy and availability
- NDN architecture is advancing towards the mobility, content sharing and security by overcoming network attacks and in-network caching
- Employ digital signature in packets for assuring integrity, exactness and authentication
Further, if you want to know more about Security Attacks in Named Data Networking A Review and Research Directions then create a bond with us. We are here to fulfill your research expectation in your desired NDN research area starting from topic selection to thesis/dissertation writing. To the great extent, we also support your own research ideas for project development.
