Research On Theory Analysis Model For Interest Flooding Attacks In Content-centric Network

From the industrial age to the information age, mankind creates the new world by technology force driving. Many modern information technologies, such as Internet, cloud computing and big data, are set off a profound change with the power changed everything on a globe scale, which can affect all human levels. We have realized the shared hardware resources by the interconnection between the networks,and could work at any place and time, but with the emergence of big data and the rich content of today’s society, people’s demand for a variety of data is also becomes more and more, so that the needs of Internet content distribution service and the total data traffic surge presents trends. Such user the requirements of users determine the need to change the network communication model, TCP/IP network has been unable to meet the bulk transmission of data content, because the means of communication for the host can’t effectively deal with content-centric needs of users and achieve efficient content distribution, which we need to focus on the communication mode is switched from the position of host to the content itself, and then Content-Centric Network(CCN) came into being, it is rapidly becoming the most competitive architecture in the future of the Internet.CCN puts the content as the first entity, the distribution and achievement of information all rely on the name of content, which no longer carry the user’s location or identity. At the beginning of design architecture, designers should consider embedding the security into protocol stack, compared with the traditional IP network,this method has certain advantages, but it still suffers damage from some attacks,such as Interest Flooding Attacks. So in order to analyze and quantify the degree of harm of Interest Flooding Attacks to CCN, this thesis establish an analytical model by using the working mechanism of nodes combined with queuing theory, finally resulting in a probability expressions of packet loss in network, for studying the effect of a parameter changing on rejection probability.First, this thesis introduces the significance of CCN, and draws out the background of Interest Flooding Attacks, points out the research status of the CCN and Interest Flooding Attacks, also introduces the main work and structural arrangements of this thesis. Then this thesis introduces CCN architecture in detail,respectively from the architecture model, node model and working mechanism,deployment and application, its security is analyzed from three angles: content consumers, intermediate nodes and content publishers, and emphatically analyzing and studying Interest Flooding Attacks. Interest Flooding Attack is one of the threat,which easy to launch and damage is bigger, in order to quantify the harm of Interest Flooding Attack, this thesis establish an analytical model of a single node by using the working mechanism of nodes combined with queuing theory, and extend it to a small topology, resulting in a mathematical probability expressions of packet loss in network.Finally, in order to verify the correctness of the theoretical analysis model, this thesis analyzes the relationship between content popularity and the probability of Denial-of-service and the impact of three parameters: the request rate of interest packets, cache size, TTL of the PIT entry for the probability of Denial-of-service by using MATLAB simulation tool. Compared with the model for Interest Flooding Attack with Fake Interests, the model of this thesis can not only analyze Interest Flooding Attack with Fake Interests, but also analyze Interest Flooding Attack with Real Interests, the proposed model has a better tolerance.