IP-ICN共存的安全与隐私:一项全面综述
Security and Privacy of IP-ICN Coexistence: A Comprehensive Survey
AI总结:
本文首次系统综述IP与ICN共存架构的安全与隐私问题,通过横向比较覆盖、底层和混合三种部署方式及纵向比较十项SP特性,揭示现有架构在机密性、可用性和匿名性等方面的不足,并指出未来研究方向。
摘要:
当今互联网正经历着海量用户的增长,用户对数据的需求持续上升,这是导致安全与隐私问题中诸多局限性的主要原因。为克服这些局限性,人们提出从以主机为中心向以数据为中心转变,在这一背景下,信息中心网络(ICN)代表了一种有前景的解决方案。然而,用ICN取代当前互联网网络层,即互联网协议(IP),是一项具有挑战性且代价高昂的任务,因为这需要在互联网服务提供商(ISP)、骨干网和自治服务(AS)之间进行全球协调。因此,研究人员预见,当前互联网的替代过程将通过IP与ICN的共存来实现过渡。在这一视角下,新型架构将IP与ICN协议相结合。然而,在已提出的架构中,只有少数具备安全内建(security-by-design)特性。因此,本文首次对最先进的IP-ICN共存架构进行了全面的安全与隐私(SP)分析,在三种部署方式(即覆盖、底层和混合)之间横向比较SP特性,并在所考虑的十项SP特性之间进行纵向比较。最后,本文阐明了IP-ICN共存中的开放问题以及未来可能的发展方向。我们的分析表明,大多数架构未能提供若干SP特性,包括数据与流量机密性、可用性以及通信匿名性。因此,本文展示了在共存阶段当前与未来协议栈的安全组合,而互联网必将经历这一阶段。
英文摘要:
Today Internet is experiencing a massive number of users with a continuously increasing need for data, which is the leading cause of introduced limitations among security and privacy issues. To overcome these limitations, a shift from host-centric to data-centric is proposed, and in this context, Information-Centric Networking (ICN) represents a promising solution. Nevertheless, unsettling the current Internet network layer, i.e., Internet Protocol (IP), with ICN is a challenging, expensive task since it requires worldwide coordination among Internet Service Providers (ISPs), backbone, and Autonomous Services (AS). Therefore, researchers foresee that the replacement process of the current Internet will transition through the coexistence of IP and ICN. In this perspective, novel architectures combine IP and ICN protocols. However, only a few of the proposed architectures place the security-by-design feature. Therefore, this article provides the first comprehensive Security and Privacy (SP) analysis of the state-of-the-art IP-ICN coexistence architectures by horizontally comparing the SP features among three deployment approaches, i.e., overlay, underlay, and hybrid, and vertically comparing among the ten considered SP features. Lastly, the article sheds light on the open issues and possible future directions for IP-ICN coexistence. Our analysis shows that most architectures fail to provide several SP features, including data and traffic flow confidentiality, availability, and anonymity of communication. Thus, this article shows the secure combination of current and future protocol stacks during the coexistence phase that the Internet will definitely walk across.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。