Defend against Internet censorship in named data networking

Cui, Xingmin; Tsang, Yu Hin; Hui, Lucas Chi Kwong; Yiu, Siu Ming; Luo, Bo

doi:10.1109/icact.2016.7423368

Cited by 4 publications

(2 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Note that we do not assume Adv who aims to block some specific content throughout the networks, such as worldwide censorship authorities. To evade such censorship, we must encrypt Interest and Data packets in an end-to-end manner in exchange for the advantage of content caching because censorship can be enforced by simply dropping Interest/Data packets which contain some censored keywords even if their origins are anonymous [20], [21]. In addition, we do not aim to achieve consumer anonymity against Adv, whereas hidden service is designed so that it provides both sender and receiver anonymity.…”

Section: B Adversarial Modelmentioning

confidence: 99%

Producer Anonymity Based on Onion Routing in Named Data Networking

Kita

Hasegawa

Ascigil

et al. 2021

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Named Data Networking (NDN) is one of promising next generation Internet architectures that aim to realize efficient content distribution. However, in terms of producer anonymity, NDN has a serious problem that adversaries can easily learn who publishes what content due to its feature that content is inherently tied to the producer by the content name and the signature. In this paper, we first define producer anonymity rigorously in terms of content-producer unlinkability, and then design a system to achieve it. Our design is based on hidden service, which is an onion routing-based system in IP, however, we improve it to take full advantage of NDN. We demonstrate that our system provides a level of anonymity comparable to hidden service with lower overhead through analysis and experiment.

show abstract

Section: B Adversarial Modelmentioning

confidence: 99%

Producer Anonymity Based on Onion Routing in Named Data Networking

Kita

Hasegawa

Ascigil

et al. 2021

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

show abstract

“…al proposed an anonymous communication network using NDN [20]. Cui et al proposed a model for preventing censorship using smart NDN routers [21]. Neither of these solutions addresses the issue of covert communications in a contested environment.…”

Section: Related Workmentioning

confidence: 99%

Protocol Proxy: An FTE-based covert channel

Oakley¹,

Yu²,

Zhong³

et al. 2020

Computers & Security

View full text Add to dashboard Cite

In a hostile network environment, users must communicate without being detected. This involves blending in with the existing traffic. In some cases, a higher degree of secrecy is required. We present a proof-of-concept format transforming encryption (FTE)-based covert channel for tunneling TCP traffic through protected static protocols. Protected static protocols are UDP-based protocols with variable fields that cannot be blocked without collateral damage, such as power grid failures. We (1) convert TCP traffic to UDP traffic, (2) introduce observation-based FTE, and (3) model interpacket timing with a deterministic Hidden Markov Model (HMM). The resulting Protocol Proxy has a very low probability of detection and is an alternative to current covert channels. We tunnel a TCP session through a UDP protocol and guarantee delivery. Observation-based FTE ensures traffic cannot be detected by traditional rule-based analysis or DPI. A deterministic HMM ensures the Protocol Proxy accurately models interpacket timing to avoid detection by sidechannel analysis. Finally, the choice of a protected static protocol foils stateful protocol analysis and causes collateral damage with false positives.

show abstract

Privacy Preserving Data-Sharing Scheme in Content-Centric Networks Against Collusion Name Guessing Attacks

Zhao

2017

IEEE Access

View full text Add to dashboard Cite

Defend against Internet censorship in named data networking

Cited by 4 publications

References 8 publications

Producer Anonymity Based on Onion Routing in Named Data Networking

Producer Anonymity Based on Onion Routing in Named Data Networking

Protocol Proxy: An FTE-based covert channel

Privacy Preserving Data-Sharing Scheme in Content-Centric Networks Against Collusion Name Guessing Attacks

Contact Info

Product

Resources

About