Travis Mick

Security, Privacy, and Access Control in Information-Centric Networking: A Survey

Information-centric networking (ICN) replaces the widely used host-centric networking paradigm in communication networks (e.g., Internet and mobile ad hoc networks) with an information-centric paradigm, which prioritizes the delivery of named content, oblivious of the contents’ origin. Content and client security, provenance, and identity privacy are intrinsic by design in the ICN paradigm as opposed to the current host centric paradigm where they have been instrumented as an after-thought. However, given its nascency, the ICN paradigm has several open security and privacy concerns. In this paper, we survey the existing literature in security and privacy in ICN and present open questions. More specifically, we explore three broad areas: 1) security threats; 2) privacy risks; and 3) access control enforcement mechanisms. We present the underlying principle of the existing works, discuss the drawbacks of the proposed approaches, and explore potential future research directions. In security, we review attack scenarios, such as denial of service, cache pollution, and content poisoning. In privacy, we discuss user privacy and anonymity, name and signature privacy, and content privacy. ICN’s feature of ubiquitous caching introduces a major challenge for access control enforcement that requires special attention. We review existing access control mechanisms including encryption-based, attribute-based, session-based, and proxy re-encryption-based access control schemes. We conclude the survey with lessons learned and scope for future work.

Catch Me If You Can: A Practical Framework to Evade Censorship in Information-Centric Networks

Internet traffic is increasingly becoming multimedia-centric. Its growth is driven by the fast-growing mobile user base that is more interested in the content rather than its origin. These trends have motivated proposals for a new Internet networking paradigm information-centric networking (ICN). This paradigm requires unique names for packets to leverage pervasive in-network caching, name-based routing, and named-data provenance. However named-data routing makes user censorship easy. Hence an anti-censorship mechanism is imperative to help users mask their named queries to prevent censorship and identification. However, this masking mechanism should not adversely affect request rates. In this paper, we propose such an anti-censorship framework, which is lightweight and specifically targets low compute power mobile devices. We analyze our frameworks information-theoretic secrecy and present perfect secrecy thresholds under different scenarios. We also analyze its breakability and computational security. Experimental results prove the frameworks effectiveness: for requests it adds between 1.3-1.8 times in latency overhead over baseline ICN; significantly lesser than the overhead of the state of the art Tor (up to 38 times over TCP).

IC-MCN: An architecture for an information-centric mobile converged network

Rapid increases in bandwidth-intensive communications on mobile devices is challenging the Internets scalability. Mobile converged networking, with its threefold convergence of technology, service, and network, is receiving significant attention as a potential solution to this problem. Unfortunately, proposed mobile convergence approaches are limited by the prevailing IP-based Internet infrastructure. The inherently host-centric IP lacks scalability to accommodate an explosion in multimedia content traffic, especially in the context of mobile convergence. Information-centric networking, a new networking paradigm, has been proposed to overcome IPs scalability problems. By routing requests and data using content names instead of host addresses, information-centric networking enables the exploitation of in-network caching, multi-homing, and multiple radio technologies, and avoids the restrictions of a host-centric foundation. We believe that information- centric networking can play a central role in a mobile converged network. We use named data networking, a popular information- centric networking architecture, as the foundation for a novel information-centric mobile converged network (IC-MCN). Our architecture allows different networks, multiple interfaces, and in-network caching to all be leveraged effectively by mobile devices. We discuss the details of the architecture, identify its advantages, and explore open challenges to the creation of a practical IC-MCN for the future.

MuNCC: Multi-hop Neighborhood Collaborative Caching in Information Centric Networks

Caching strategies in Information-Centric Networks (ICNs) can be classified into the categories of individual caching, on-path caching, and collaborative caching. Each has several drawbacks, such as high content redundancy in individual caching, unutilized caching capacity in on-path caching, and high coordination cost in collaborative caching. Despite the relatively higher cost of coordination, collaborative caching offers several advantages over the other categories, namely low latency and better cache utilization. A collaborative caching mechanism with low coordination costs that still possesses the inherent advantages has not been proposed in the literature. In this paper, we aim to address this missing link by presenting MuNCC, a scalable collaborative caching scheme, which utilizes a node’s neighborhood caching capacity and has negligible communication overhead. MuNCC uses attenuated Bloom filters, augmented by a two-level node cache structure and an efficient cache redundancy elimination technique. Exhaustive simulation-based comparison of MuNCC against the state-of-the-art shows that it reduces content retrieval latency by 30% to 40% while maintaining a high level of cache utilization and incurring low overheads.

LASeR: Lightweight Authentication and Secured Routing for NDN IoT in Smart Cities

Recent literature suggests that the Internet of Things (IoT) scales much better in an information-centric networking (ICN) model instead of the current host-centric Internet protocol (IP) model. In particular, the named data networking (NDN) project (one of the ICN architecture flavors) offers features exploitable by IoT applications, such as stateful forwarding, in-network caching, and built-in assurance of data provenance. Though NDN-based IoT frameworks have been proposed, none have adequately and holistically addressed concerns related to secure onboarding and routing. Additionally, emerging IoT applications such as smart cities require high scalability and thus pose new challenges to NDN routing. Therefore, in this paper, we propose and evaluate a novel, scalable framework for lightweight authentication and hierarchical routing in the NDN IoT. Our ns-3 based simulation analyses demonstrate that our framework is scalable and efficient. It supports deployment densities as high as 40 000 nodes/km2 with an average onboarding convergence time of around 250 s and overhead of less than 20 kibibytes per node. This demonstrates its efficacy for emerging large-scale IoT applications such as smart cities.

iCenS: An information-centric smart grid network architecture

Smart grid technologies will equip the electrical grid of the future with two-way information flow between grid entities and consumers. This bidirectional information flow facilitates improved grid monitoring, control automation, energy efficiency, and sustainability. Several smart grid networking architectures have been proposed recently. However, the majority of these are restricted to subdomains such as home area networks or substation networks, or are not scalable. There is a need for an overarching and inclusive communication architecture which accounts for all smart grid communication scenarios. In this paper, we propose iCenS, a holistic smart grid networking architecture. We identify various communication scenarios, elaborate on the suitability of iCenS, and discuss how it can be used to solve smart grid networking challenges. We also present simulation results demonstrating the scalability of our design and its effectiveness in serving various types of smart grid traffic.

AccConF: An Access Control Framework for Leveraging In-network Cached Data in the ICN-Enabled Wireless Edge

The fast-growing Internet traffic is increasingly becoming content-based and driven by mobile users, with users more interested in data rather than its source. This has precipitated the need for an information-centric Internet architecture. Research in information-centric networks (ICNs) have resulted in novel architectures, e.g., CCN/NDN, DONA, and PSIRP/PURSUIT; all agree on named data based addressing and pervasive caching as integral design components. With network-wide content caching, enforcement of content access control policies become non-trivial. Each caching node in the network needs to enforce access control policies with the help of the content provider. This becomes inefficient and prone to unbounded latencies especially during provider outages. In this paper, we propose an efficient access control framework for ICN, which allows legitimate users to access and use the cached content directly, and does not require verification/authentication by an online provider authentication server or the content serving router. This framework would help reduce the impact of system down-time from server outages and reduce delivery latency by leveraging caching while guaranteeing access only to legitimate users. Experimental/simulation results demonstrate the suitability of this scheme for all users, but particularly for mobile users, especially in terms of the security and latency overheads.

Application-Specific Secure Gathering of Consumer Preferences and Feedback in ICNs

The shift from the host-centric to the information-centric paradigm results in many benefits including native security, enhanced mobility, and scalability. The corresponding information-centric networking (ICN), also presents several important challenges, such as closest replica routing, client privacy, and client preference collection. The majority of these challenges have received the research community’s attention. However, no mechanisms have been proposed for the challenge of effective client preferences collection. In the era of big data analytics and recommender systems customer preferences are essential for providers such as Amazon and Netflix. However, with content served from in-network caches, the ICN paradigm indirectly undermines the gathering of these essential individualized preferences. In this paper, we discuss the requirements for client preference collections and present potential mechanisms that may be used for achieving it successfully.