Security Attacks in Named Data Networking: A Review and Research Directions

Cache Pollution Attacks in the NDN Architecture: Impact and Analysis

“…Caching in NDN is managed by different policies such as: Least Recently Used (LRU), Least Frequently Used (LFU), First In First Out (FIFO), Random. However, since no pre-existing mechanism is defined to detect the access of different malicious nodes into the Content Store (CS) [15], this "secured-by design" architecture is vulnerable to attacks that mainly aim to abuse the Content Caching process, disturb the availability of the data, maximize the data retrieval delay and manipulate the privacy of data. These attacks include Cache Privacy Attacks, Content Poisoning Attacks, Interest Flooding Attacks and Cache Pollution Attacks.…”

“…Although the routers can not check the validity of these malicious data due to their limited resources and time, as a result, only the corrupted content will stay in the cache of the CS, which causes a high delay in retrieving certain content and legitimate content will not be served from the cache. Content Poisoning Attack affects consumer applications and routers [15].…”

Detection of malicious consumer interest packet with dynamic threshold values

“… Kumar et al (2019) and Hassanein & Zulkernine (2015) explained some of the most common attacks within the existing TCP/IP model such as Denial of Service (DoS) attack, Distributed Denial of Service (DDoS) attack, eavesdropping (snooping), masquerading, TCP Replay Attack, Man in the Middle Attack, repudiation, and traffic analysis attack. These legacy attacks are not possible in NDN because of the absence of the host, but with the advent of this new architecture, some new attack surfaces have emerged which need to be addressed and it is an active research area.…”

“…A consumer can acquire a public key by following this field of KeyLocator and can retrieve it just like a normal data packet. Kumar et al (2019) explained some of the most common attacks within the existing TCP/IP model such as Denial of Service (DoS) attack, Distributed Denial of Service (DDoS) attack, eavesdropping (snooping), masquerading, TCP Replay Attack, Man in the Middle Attack, repudiation, and traffic analysis attack. In a modification attack, the attacker does not only compromise the confidentiality of the data by accessing it but also compromises the integrity of the data by trying to alter it.…”

“…In NDN there are four main types of security threats that are briefly discussed in the coming sections and the attack effects on the security goals are mentioned in Table 1 ( Kumar et al, 2019 ; Tourani et al, 2018 ).…”