An efficient and DoS-resilient name lookup for NDN interest forwarding

• Published in: Connection science Vol. 33; no. 3; pp. 735 - 752
• Main Authors: He, Dacheng, Zhang, Dafang, Li, Yanbiao, Liang, Wei, Hsieh, Meng-Yen
• Format: Journal Article
• Language: English
• Published: Abingdon Taylor & Francis 03.07.2021; Taylor & Francis Ltd
• Subjects: Algorithms; Caching; Computer architecture; Cryptography; Data transmission; Denial of service attacks; DoS; Edge computing; feature prefix; interest forwarding; Internet of Things; name lookup; NDN
• ISSN: 0954-0091; 1360-0494
• DOI: 10.1080/09540091.2021.1875988

As a novel Internet architecture focused on data contents, Named Data Networking (NDN) has been proven to be of great value in supporting the Internet of Things, Edge computing, Blockchain, and other popular topics. They can benefit mainly from NDN's intrinsic properties, such as flexible multicasting, in-network caching, among several others. However, once NDN's forwarding plane suffers Denial of Service (DoS) attacks, the overall system performance would be affected significantly. In NDN data transmission, interest forwarding is the most time-consuming operation and thus opens a possible vector of DoS attacks. It is proposed in this paper a fast name lookup algorithm for NDN interest forwarding, which selects feature prefixes instead of lengths to filter out interest packets in NDN interest forwarding. Due to the excellent filtration with feature prefixes, the algorithm accelerates NDN forwarding processes. Compared with other existing solutions, the proposed algorithm shows more than 70% of time improvement in forwarding malicious interests, while remaining at the same performance level in standard cases.