Triangle area based multivariate correlation analysis for detecting and mitigating cache pollution attacks in named data networking

Sohail, Muhammad; Zheng, Quan; Rezaiefar, Zeinab; Khan, Muhammad Alamgeer; Ullah, Rizwan; Tan, Xiaobin; Yang, Jian; Yuan, Liu

Abstract

The key feature of NDN is in-network caching that every router has its cache to store data for future use, thus improve the usage of the network bandwidth and reduce the network latency. However, in-network caching increases the security risks - cache pollution attacks (CPA), which includes locality disruption (ruining the cache locality by sending random requests for unpopular contents to make them popular) and False Locality (introducing unpopular contents in the router's cache by sending requests for a set of unpopular contents). In this paper, we propose a machine learning method, named Triangle Area Based Multivariate Correlation Analysis (TAB-MCA) that detects the cache pollution attacks in NDN. This detection system has two parts, the triangle-area-based MCA technique, and the threshold-based anomaly detection technique. The TAB-MCA technique is used to extract hidden geometrical correlations between two distinct features for all possible permutations and the threshold-based anomaly detection technique. This technique helps our model to be able to distinguish attacks from legitimate traffic records without requiring prior knowledge. Our technique detects locality disruption, false locality, and combination of the two with high accuracy. Implementation of XC-topology, the proposed method shows high efficiency in mitigating these attacks. In comparison to other ML-methods, our proposed method has a low overhead cost in mitigating CPA as it doesn't require attackers' prior knowledge. Additionally, our method can also detect non-uniform attack distributions.

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2020 3rd International Conference on Hot Information-Centric Networking (HotICN)
• Start Date: Dec 12, 2020
• End Date: Dec 14, 2020
• Acceptance Date: Oct 1, 2020
• Online Publication Date: Feb 16, 2021
• Publication Date: Feb 16, 2021
• Deposit Date: Jul 13, 2023
• Publisher: Institute of Electrical and Electronics Engineers (IEEE)
• Pages: 114-121
• Book Title: 2020 3rd International Conference on Hot Information-Centric Networking (HotICN)
• ISBN: 9781728192178
• DOI: https://doi.org/10.1109/HotICN50779.2020.9350746
• Public URL: https://uwe-repository.worktribe.com/output/10938082