Enabling NAME-Based Security and Trust

Fotiou, Nikos; Polyzos, George C.

doi:10.1007/978-3-319-18491-3_4

Cited by 7 publications

(4 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is a fact that key revocation in these schemes is nontrivial, as key revocation also means identity revocation. Our design assumes that a key revocation solution exists (eg, the serial number approach described in Fotiou and Polyzos). • Subscribers can reliably determine content integrity, provenance, and authenticity: Our solution considers only access control and content confidentiality. Content integrity, provenance, and authenticity verification are out of the scope of our system. • PKGs can reliably determine if a user is an owner of an identity and can securely distribute SKs: In our system, it is assumed that users cannot generate a S K that corresponds to an identity or a policy that do not own.…”

Section: Discussionmentioning

confidence: 99%

Rendezvous‐based access control for information‐centric architectures

Fotiou

Alzahrani

2017

Int J Network Mgmt

Self Cite

View full text Add to dashboard Cite

SummaryInformation-centric networking (ICN) has been in the spotlight of many research efforts as it shifts the focus from (endpoint) locations to content items themselves. By leveraging content centrism and by using content and content names as the main pillar of all (inter-)networking functions, ICN architectures are expected to overcome many of the limitations of the current Internet architecture. Information-centric networking paradigm also advocates a shift in security solutions: Instead of securing the communication channel, ICN security solutions should secure the content itself. Therefore, end users should be able to access content stored in various locations in the network-even unsecured-in a private and secure way. Similarly, content owners should not lose the governance of their content items, no matter the network location where they are stored.In this paper, we design, implement, and evaluate an access control delegation mechanism for the publish-subscribe Internet architecture. Our solution does not introduce any new entity; instead it allows semitrusted publish-subscribe Internet rendezvous points to enforce access control policies. Moreover, our solution leverages identity-based proxy re-encryption to protect content confidentiality in the presences of malicious publishers, ie, nodes that host content items and do not respect the access control decisions of the rendezvous point.

show abstract

Section: Discussionmentioning

confidence: 99%

Rendezvous‐based access control for information‐centric architectures

Fotiou

Alzahrani

2017

Int J Network Mgmt

Self Cite

View full text Add to dashboard Cite

show abstract

“…secure and it is based on bilinear maps applied over the elements of a group G of order p, where p is a prime number. 5 In [10] we use this implementation to build name-based trust mechanism and we show how name resolution infrastructure can be used for delivering the necessary system parameters.…”

Section: Rnmentioning

confidence: 99%

Building a reliable Internet of Things using Information-Centric Networking

Polyzos

Fotiou

2015

J Reliable Intell Environ

Self Cite

View full text Add to dashboard Cite

Recent developments in sensors, devices, identification technologies, and wireless networking have fueled the vision of the Internet of Things (IoT). Small devices with processing, sensing, and connectivity capabilities can be connected to the Internet and produce vast amounts of meaningful information. At the same time identification technologies, such as RFID, enable the association of information with "things". The information produced by things, or associated with things, will be both huge and sensitive. For this reason new architectures for disseminating and processing this information in a reliable and efficient way should be explored. In this paper, we present an architecture for the IoT, based on the Information-Centric Networking (ICN) paradigm. ICN architectures are built around information and information identifiers and they provide mechanisms for advertising, finding, and retrieving information. We leverage a particular ICN architecture, the Publish-Subscribe Internetworking architecture, to design an IoT architecture and we present three security solutions that enable access control, secure delegation of information storage and trust based on information identifiers.

show abstract

“…A signature ties content to its content name and ensures that the content's integrity, validity, and correctness are maintained regardless of where and when content is retrieved. NDN may not require the establishment of a specific certification infrastructure, instead opting for the outsourcing of trust management to compatible services [50].…”

Section: Ndn Securitymentioning

confidence: 99%

Security and Integrity Attacks in Named Data Networking: A Survey

et al. 2023

View full text Add to dashboard Cite

The notion of Information-Centric Networking (ICN) specifies a new communication model that emphasis on the content exchanged rather than the devices connected. ICN architectures like Content Centric Network (CCN) and Named Data Networking (NDN) have been proposed to shift from host-centric based to content-centric based communication along and provide benefits to users in addressing the challenges of traditional IP networks. It differs from host-centric standard Internet Protocol (IP) networking in of naming, routing, forwarding, and caching characteristics. Naming features used in NDN use global unique names provided by content-based security and encryption. It ensures content integrity and authenticity as part of its design. In this paper, we survey on security aspects of NDN/CCN, discussing three integrity attacks such as replay attacks, Man-in-The-Middle (MiTM) attacks, and Content Poisoning Attack (CPA) with countermeasure against them. In addition, we highlight an open challenge and offer future research directions in the context of security.

show abstract

Enabling NAME-Based Security and Trust

Cited by 7 publications

References 14 publications

Rendezvous‐based access control for information‐centric architectures

Rendezvous‐based access control for information‐centric architectures

Building a reliable Internet of Things using Information-Centric Networking

Security and Integrity Attacks in Named Data Networking: A Survey

Contact Info

Product

Resources

About