Preventing information leakage in NDN with name and flow filters

Daishi Kondo 1
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : In recent years, Named Data Networking (NDN) has emerged as one of the most promising future networking architectures. To be adopted at Internet scale, NDN needs to resolve the inherent issues of the current Internet. Since information leakage from an enterprise is one of the big issues even in the Internet and it is very crucial to assess the risk before replacing the Internet with NDN completely, this thesis investigates whether a new security threat causing the information leakage can happen in NDN. Assuming that (i) a computer is located in the enterprise network that is based on an NDN architecture, (ii) the computer has already been compromised by suspicious media such as a malicious email, and (iii) the company installs a firewall connected to the NDN-based future Internet, this thesis focuses on a situation that the compromised computer (i.e., malware) attempts to send leaked data to the outside attacker. The contributions of this thesis are fivefold. Firstly, this thesis proposes an information leakage attack through a Data and through an Interest in NDN. Secondly, in order to address the information leakage attack, this thesis proposes an NDN firewall which monitors and processes the NDN traffic coming from the consumers with the whitelist and blacklist. Thirdly, this thesis proposes an NDN name filter to classify a name in the Interest as legitimate or not. The name filter can, indeed, reduce the throughput per Interest, but to ameliorate the speed of this attack, malware can send numerous Interests within a short period of time. Moreover, the malware can even exploit an Interest with an explicit payload in the name (like an HTTP POST message in the Internet), which is out of scope in the proposed name filter and can increase the information leakage throughput by adopting a longer payload. To take traffic flow to the NDN firewall from the consumer into account, fourthly, this thesis proposes an NDN flow monitored at an NDN firewall. Fifthly, in order to deal with the drawbacks of the NDN name filter, this thesis proposes an NDN flow filter to classify a flow as legitimate or not. The performance evaluation shows that the flow filter complements the name filter and greatly chokes the information leakage throughput
Complete list of metadatas

Cited literature [132 references]  Display  Hide  Download

https://hal.univ-lorraine.fr/tel-02094910
Contributor : Thèses Ul <>
Submitted on : Wednesday, April 10, 2019 - 9:56:16 AM
Last modification on : Friday, May 3, 2019 - 9:19:37 AM

File

DDOC_T_2018_0233_KONDO.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : tel-02094910, version 1

Citation

Daishi Kondo. Preventing information leakage in NDN with name and flow filters. Networking and Internet Architecture [cs.NI]. Université de Lorraine, 2018. English. ⟨NNT : 2018LORR0233⟩. ⟨tel-02094910⟩

Share

Metrics

Record views

84

Files downloads

2487