针对内容中心网络(Content-Centric Networking, CCN)下的兴趣包泛洪攻击问题,该文提出基于异常名称前缀识别的协同反馈防御方法。利用CCN中路由器维持的兴趣包转发状态检测兴趣包泛洪攻击,识别异常名称前缀,并向相邻节点发送异常名称前缀,进行协同防御。与其他方法对比分析结果表明,所提出的基于前缀识别的兴趣泛洪攻击防御方法可以准确地识别异常名称前缀,并快速抑制异常兴趣包的传输,而不影响合法兴趣包的速率。
As for the interest flooding attack in Content-Centric Networking (CCN), this study proposes a new approach to mitigate interest flooding attack based on abnormal name prefix identification. This study utilizes the forwarding state in CCN routers to detect the interest flooding and identify abnormal name prefixes, and collaboratively defense the attack by sending the identified name prefixes to neighbors. Comparison between results of the proposed approach and others, the proposed approach is able to identify the abnormal name prefixes exactly, and quickly suppress malicious interest flooding without reducing the rate of normal interests.