HPR-DS: A Hybrid Proactive Reactive Defense Scheme Against Interest Flooding Attack in Named Data Networking

Named Data Networking (NDN) has emerged as a promising network paradigm for the future Internet. It revolutionizes content retrieval by decoupling it from specific locations, thereby overcoming the limitations of traditional IP addressing and significantly enhancing data delivery efficiency. Additionally, NDN’s stateful forwarding plane for routers enables robust aggregation of identical requests, bolstering resistance against Distributed Denial of Service (DDoS) attacks. Despite these advancements, NDN remains vulnerable to the Interest Flooding Attack (IFA), wherein excessive requests from attackers can compromise transmission quality by depleting router resources. In the current landscape, researchers have proposed various strategies aimed at improving the accuracy, timeliness, and cost-effectiveness of defenses against IFA attacks, presuming stable user behavior. However, several challenges persist in effectively countering IFA attacks, including the need to ensure transmission quality throughout users’ lifecycles, eliminate attacks at their origin, and adapt to dynamic user behaviors. In response to these challenges, this paper presents the Hybrid Proactive Reactive Defense Scheme (HPR-DS). HPR-DS employs distinct proactive and reactive modules for resource management and user behavior analysis, respectively, at intermediate and edge nodes. It employs time series analysis to gauge evolving resource requirements and maintains separate resource pools for each content. Additionally, HPR-DS utilizes multidimensional data clustering to accurately identify attackers. Simulation results demonstrate the superior performance of HPR-DS in safeguarding user transmission quality throughout the entirety of their lifecycle and in enhancing detection precision in dynamic network environments.