【摘要】 面对现有签名算法计算复杂度高与节点计算资源有限的矛盾,命名数据网络节点在流量较大的场合,无法完成所有接收数据包的签名校验工作,导致内容污染成为其重要的安全隐患之一。针对该问题,提出一种基于节点接口可靠性的概率转发策略。节点对接收数据包尽力校验,根据接口的成功校验概率评估接口可靠性,进而以此为依据设置每一接口的转发概率,将用户请求的兴趣包尽可能转发至可靠的上游节点或源服务器。仿真结果表明,在网络整体污染较轻的场景下,相比于等概率随机转发策略,本策略能有效地对抗内容污染。更多还原

【Abstract】 Facing the contradiction of high complex of signature algorithm and limited computational resource,the node of named data networking cannot complete the verification of all received data packets under the heavy traffic situation. Consequently,content pollution emerges and becomes an important security threat in named data networking. Focusing on this problem,we propose a probabilistic forwarding strategy based on interface reliability. The node executing this strategy must try its best to verify received data packets,then evaluate the reliability of each interface according to its successful verification probability. Based on the evaluation results,the forwarding probability is configured for each interface. It is used to select an upstream content source as reliable as possible for forwarding interest packets. The simulation results show that,compared with the equal probability random forwarding strategy,this proposed strategy can be more effective to cope with content pollution when network suffers mild pollution.更多还原