Cache Privacy in Named-Data Networking

Ács, Gergely; Conti, Mauro; Gasti, Paolo; Ghali, Cesar; Tsudik, Gene

doi:10.1109/icdcs.2013.12

Cited by 82 publications

(96 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…When an NDN router receives an interest, it first looks up its PIT to determine whether another interest for the same name is currently outstanding. There are three possible outcomes: (1) If the same name is already in the router's PIT and the arrival interface of the present interest is already in the set of arrival-interfaces of the corresponding PIT entry, the interest is discarded. (2) If a PIT entry for the same name exists, yet the arrival interface is new, the router updates the PIT entry by adding a new interface to the set.…”

Section: Ndn Overviewmentioning

confidence: 99%

Covert ephemeral communication in named data networking

Ambrosin

Conti

Gasti

et al. 2014

Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security

Self Cite

View full text Add to dashboard Cite

Abstract-In the last decade, there has been a growing realization that the current Internet Protocol is reaching the limits of its senescence. This has prompted several research efforts that aim to design potential next-generation Internet architectures. Named Data Networking (NDN), an instantiation of the contentcentric approach to networking, is one such effort. In contrast with IP, NDN routers maintain a significant amount of userdriven state. In this paper we investigate how to use this state for covert ephemeral communication (CEC). CEC allows two or more parties to covertly exchange ephemeral messages, i.e., messages that become unavailable after a certain amount of time. Our techniques rely only on network-layer, rather than application-layer, services. This makes our protocols robust, and communication difficult to uncover. We show that users can build high-bandwidth CECs exploiting features unique to NDN: innetwork caches, routers' forwarding state and name matching rules. We assess feasibility and performance of proposed cover channels using a local setup and the official NDN testbed.

show abstract

Section: Ndn Overviewmentioning

confidence: 99%

Covert ephemeral communication in named data networking

Ambrosin

Conti

Gasti

et al. 2014

Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security

Self Cite

View full text Add to dashboard Cite

show abstract

“…Cache privacy is also in [7]. The authors analyze timing and probing attacks and then they propose some countermeasures.…”

Section: Related Workmentioning

confidence: 99%

On the Tradeoff between Performance and User Privacy in Information Centric Networking

Mauri

Verticale

2014

2014 6th International Conference on New Technologies, Mobility and Security (NTMS)

View full text Add to dashboard Cite

Abstract-Widespread use of caching provides advantages for users and providers, such as reduced network latency, higher content availability, bandwidth reduction and server load balancing. In Information Centric Networking, the attention is shifted from users to content, which is addressed by its name and not by its location. Moreover, the content objects are stored as close as possible to the customers. Therefore, the cache has a central role for the improvement of the network performance but this is strictly related to the caching policy used. However, this comes at the price of increased tracing of users communication and users behavior to define an optimal caching policy. A malicious node could exploit such information to compromise the privacy of users. In this work, we compare different caching policies and we take the first steps for defining the tradeoff between caching performance and user privacy guarantee. In particular, we provide a way to implement prefetching and we define some bounds for the users' privacy in this context.

show abstract

“…This is because research only concentrate on improving the efficiency of such systems and neglect to incorporate the legal requirements. Researchers have attempted to improve privacy [1], [21] and security [36], [20], [18] issues of CCNs. However, the past research fails to adapt the technology to safeguard the rights of the content publisher in terms of copyright, leakage of sensitive private information, and proper monetary and non-monetary incentives.…”

Section: Related Workmentioning

confidence: 99%

“…Private sensitive state can be associated to content with respect to the circumstances it is requested in [11], [20]. Not only this, but access to router caches allows end-users (who have access to the same router cache) to obtain information about their nearby users' content access patterns [1].…”

Section: B Privacy Protectionmentioning

confidence: 99%

Investigating Regulative Implications for User-generated Content and a Design Proposal

Garg

Schmitt

Stiller

2014

PIK - Praxis Der Informationsverarbeitung Und Kommunikation

View full text Add to dashboard Cite

The rapid increase of the Internet connectivity and the data publishing activity, like user-generated content, has lead Internet Service Providers (ISPs) to establish more efficient mechanisms for content delivery, such as caching. Mechanisms such as content-aware-networks and in-network caching reduce network load, server load, and user response time, thus, manage the network. However, caching of content also raises major implications in terms of legal acts and bills (e.g., data privacy, copyright), dealing with access control, validation scheme, and regulations (e.g., contractual obligation, legal restrictions).In general, user-generated content is linked with sensitive information, such as geographical information, medical and financial information, personal identifiable data, photos, videos, and contact information. Therefore, it is essential to secure data and regulate access. The latter, is gained by including access control mechanisms in the data exchange process, where a user requesting data must prove his access rights. Therefore, a user has to show an access ticket, which includes his rights based on legal and regulative implications. In order to secure any kind of data exchange, authentication of each participating communication entity (e.g., content owner, server, and end-user) is essential, which is part of the proposed two-way authentication handshake in this paper that is performed to generate a secure communication channel.The main contribution of this paper is to show that transmission, storage, and usage of user-generated data in caches within the network is manageable within the legal laws on sensitivity, copyright, and privacy. The scope of studying these laws, acts, and policies is restricted to Switzerland (CH), the European Union (EU), and the United States of America (USA). Finally, a solution is presented including access ticketing and two-way authentication mechanisms based on common standards from IP networks.

show abstract

Cache Privacy in Named-Data Networking

Cited by 82 publications

References 14 publications

Covert ephemeral communication in named data networking

Covert ephemeral communication in named data networking

On the Tradeoff between Performance and User Privacy in Information Centric Networking

Investigating Regulative Implications for User-generated Content and a Design Proposal

Contact Info

Product

Resources

About