LogDos：基于路径标识的信息中心网络中基于日志的DDoS预防机制
LogDos: A Novel Logging-based DDoS Prevention Mechanism in Path Identifier-Based Information Centric Networks
摘要：
信息中心网络（ICN）是近年来出现的下一代互联网的一种新的网络模式。这些网络的主要目标是提供有效的机制，内容分发和检索的基础上，在网络内容缓存。不同ICN架构的设计解决了传统互联网中存在的许多安全问题。因此，允许通过互联网进行安全、可靠和可扩展的通信。然而，最近的研究表明，这些架构容易受到不同类型的DDoS攻击。提出了一种基于路径标识的信息中心网络分布式拒绝服务攻击（DDoS）防御机制。所提出的机制，称为LogDos，执行基于GET消息日志记录的过滤，并采用基于Bloom过滤器的日志记录来存储传入的GET消息，以便验证相应的内容消息，同时过滤来自恶意主机的数据包。我们开发了三个版本的LogDos与不同级别的存储开销在LogDos启用路由器。大量的模拟实验表明，LogDos是非常有效的DDoS攻击，因为它可以过滤超过99.98%的攻击流量在不同的攻击场景，同时产生可接受的存储开销。
英文摘要：
Information Centric Networks (ICNs) have emerged in recent years as a new networking paradigm for the next-generation Internet. The primary goal of these networks is to provide effective mechanisms for content distribution and retrieval based on in-network content caching. The design of different ICN architectures addressed many of the security issues found in the traditional Internet. Therefore, allowing for a secure, reliable, and scalable communication over the Internet. However, recent research studies showed that these architectures are vulnerable to different types of DDoS attacks. In this paper, we propose a defense mechanism against distributed denial of service attacks (DDoS) in path-identifier based information centric networks. The proposed mechanism, called LogDos, performs GET Message logging based filtering and employs Bloom filter based logging to store incoming GET messages such that corresponding content messages are verified, while filtering packets originating from malicious hosts. We develop three versions of LogDos with varying levels of storage overhead at LogDos-enabled router. Extensive simulation experiments show that LogDos is very effective against DDoS attacks as it can filter more than 99.98 % of attack traffic in different attack scenarios while incurring acceptable storage overhead.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
