A Light-weight Mitigation Scheme on the Mole Content Poisoning Attack in NDN

With a novel content-based communication model that is designed for data sharing, Named Data Networking (NDN) borns with innate security by per package encryption and achieves better scalability and mobility. Security attacks in the current Internet, e.g., IP and/or DNS spoofing, can hardly hazard NDN since there is no address and the embedded security in the data packet. However, some new kinds of attacks (e.g., interest flooding attack and content poisoning attack) damage NDN if not investigated thoroughly. In NDN, there exists a variant of content poisoning attack (CPA) that the attack is launched by some compromised core routers and this kind of attack causes severe damage to the network. In this paper, this variant of CPA has named the mole content poisoning attack (MCPA), and a Kalman filter based light-weight mitigation scheme is proposed. Besides, random sampling is imposed on the data traffic and tunes the state parameters in the Kalman filter to achieve faster convergence in a router. Compared with the mitigation scheme by the probabilistically checking of signatures on the data traffic, the proposed light-weight mitigation scheme recovers interest satisfaction rates (ISRs) of consumers while introducing less computation overhead.