Visible to the public A Mechanism for Mitigating DoS Attack in ICN-based Internet of Things

TitleA Mechanism for Mitigating DoS Attack in ICN-based Internet of Things
Publication TypeConference Paper
Year of Publication2017
AuthorsXue, Haoyue, Li, Yuhong, Rahmani, Rahim, Kanter, Theo, Que, Xirong
Conference NameProceedings of the 1st International Conference on Internet of Things and Machine Learning
PublisherACM
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-5243-7
Keywordscomposability, denial-of-service, edge detection, information centric networking, Interest Flooding Attack, Metrics, pubcrawl, resilience, Resiliency, Scalability, security
AbstractInformation-Centric Networking (ICN) 1 is a significant networking paradigm for the Internet of Things, which is an information-centric network in essence. The ICN paradigm owns inherently some security features, but also brings several new vulnerabilities. The most significant one among them is Interest flooding, which is a new type of Denial of Service (DoS) attack, and has even more serious effects to the whole network in the ICN paradigm than in the traditional IP paradigm. In this paper, we suggest a new mechanism to mitigate Interest flooding attack. The detection of Interest flooding and the corresponding mitigation measures are implemented on the edge routers, which are directly connected with the attackers. By using statistics of Interest satisfaction rate on the incoming interface of some edge routers, malicious name-prefixes or interfaces can be discovered, and then dropped or slowed down accordingly. With the help of the network information, the detected malicious name-prefixes and interfaces can also be distributed to the whole network quickly, and the attack can be mitigated quickly. The simulation results show that the suggested mechanism can reduce the influence of the Interest flooding quickly, and the network performance can recover automatically to the normal state without hurting the legitimate users.
URLhttp://doi.acm.org/10.1145/3109761.3109787
DOI10.1145/3109761.3109787
Citation Keyxue_mechanism_2017