Access control enforcement delegation for information-centric networking architectures

Fotiou, Nikos; Marias, Giannis F.; Polyzos, George C.

doi:10.1145/2342488.2342507

Cited by 56 publications

(40 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…This also creates significant challenges when attempting to manage and restrict key access. An authorization delegation scheme has been proposed [Fotiou12]. This scheme allows semi-trusted entities (such as caches or CDN nodes) to delegate access control decisions to third-party access control providers that are trusted by the content publisher.…”

Section: Authorization Access Control and Loggingmentioning

confidence: 99%

Information-Centric Networking: Evaluation and Security Considerations

Ohlman¹,

Davies²,

Spirou³

et al. 2016

View full text Add to dashboard Cite

show abstract

Section: Authorization Access Control and Loggingmentioning

confidence: 99%

Information-Centric Networking: Evaluation and Security Considerations

Ohlman¹,

Davies²,

Spirou³

et al. 2016

View full text Add to dashboard Cite

show abstract

“…al. [2] propose a delegation-based access control architecture for ICN. However, the solution relies on state maintenance and synchronization between content routers and access control policy servers, therefore scalability becomes a major issue for large-scale content networks.…”

Section: Related Workmentioning

confidence: 99%

“…Traditionally, content caching and access control are performed in application-level services, such as encryption-based access control or delegation-based services [2]. We seek to address efficient integrity verification and content access (including caching) control with a single solution in the network layer, by leveraging the existing security mechanism in NDN with a minimal extension.…”

mentioning

confidence: 99%

LIVE: Lightweight Integrity Verification and Content Access Control for Named Data Networking

Zhang

Zheng

et al. 2015

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

Named data networking (NDN) is a new paradigm for the future Internet wherein interest and data packets carry content names rather than the current IP paradigm of source and destination addresses. Security is built into NDN by embedding a public key signature in each data packet to enable verification of authenticity and integrity of the content. However, existing heavyweight signature generation and verification algorithms prevent universal integrity verification among NDN nodes, which may result in content pollution and denial of service attacks. Furthermore, caching and location-independent content access disables the capability of a content provider to control content access, e.g., who can cache a content and which end user or device can access it. We propose a lightweight integrity verification (LIVE) architecture, an extension to the NDN protocol, to address these two issues seamlessly. LIVE enables universal content signature verification in NDN with lightweight signature generation and verification algorithms. Furthermore, it allows a content provider to control content access in NDN nodes by selectively distributing integrity verification tokens to authorized nodes. We evaluate the effectiveness of LIVE with open source CCNx project. Our paper shows that LIVE only incurs average 10% delay in accessing contents. Compared with traditional public key signature schemes, the verification delay is reduced by over 20 times in LIVE.

show abstract

“…Therefore, existing privacy-preserving solutions are not being able to be adopted directly by mobile social networks. Actually, the information sharing among different people for mobile social networking is commonly under the honest-but-curious model [3], that is parties involved are honest (e.g. would not inject false values into their data) but at most curious about other"s data.…”

Section: Motivation Applicationsmentioning

confidence: 99%

Privacy-Preserving P2P Information Sharing Protocol for Mobile Social Networks

Wang¹,

Ye²,

Yiu³

et al. 2013

IJCCE

View full text Add to dashboard Cite

Abstract-The wide use of mobile social networks has made it easier for people to share and exchange information with others anywhere, anytime. However, sharing operations of personal data on mobile social networks has put individual privacy under risk in unprecedented ways. We propose a protocol for privacy-preserving P2P information sharing for mobile social networking; because of the limitation of computation and communication for mobile devices, traditional privacy-preserving information sharing for private data sources cannot be applied in mobile social networks. Therefore, we designed a lightweight obfuscation and encryption model to defend against honest-but-curious behavior attack. The protocol is practical for mobile devices and the simulation performance is encouraging.

show abstract

Access control enforcement delegation for information-centric networking architectures

Cited by 56 publications

References 12 publications

Information-Centric Networking: Evaluation and Security Considerations

Information-Centric Networking: Evaluation and Security Considerations

LIVE: Lightweight Integrity Verification and Content Access Control for Named Data Networking

Privacy-Preserving P2P Information Sharing Protocol for Mobile Social Networks

Contact Info

Product

Resources

About