Research Article
Countermeasures for Mitigating ICN Routing Related DDoS Attacks
@INPROCEEDINGS{10.1007/978-3-319-23802-9_9, author={Eslam AbdAllah and Mohammad Zulkernine and Hossam Hassanein}, title={Countermeasures for Mitigating ICN Routing Related DDoS Attacks}, proceedings={International Conference on Security and Privacy in Communication Networks. 10th International ICST Conference, SecureComm 2014, Beijing, China, September 24-26, 2014, Revised Selected Papers, Part II}, proceedings_a={SECURECOMM}, year={2015}, month={12}, keywords={Information centric networking Distributed denial of service ICN routing.}, doi={10.1007/978-3-319-23802-9_9} }
- Eslam AbdAllah
Mohammad Zulkernine
Hossam Hassanein
Year: 2015
Countermeasures for Mitigating ICN Routing Related DDoS Attacks
SECURECOMM
Springer
DOI: 10.1007/978-3-319-23802-9_9
Abstract
Information Centric Networking (ICN) is a new communication paradigm for the future Internet that focuses on contents rather than infrastructures or end-points. Distributed Denial of Service (DDoS) attacks that may occur in many scenarios in an ICN, can overwhelm ICN routing and caching resources. In this paper, we focus on routing related DDoS attacks from both publisher and subscriber points of view and how they impact ICNs. We then propose a generic solution independent of a specific ICN architecture. This solution is based on a number of countermeasures: request satisfaction ratio, request rate limit, rating for contents and publishers, and test message. We present the implementation results, which show that the solution mitigates the routing related DDoS attacks and efficiently enhances the ICN performance in the existence of these attacks.