SCION: Scalability, Control, and Isolation on Next-Generation Networks

Abstract

Public reporting burden for the collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to a penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

Timing Attacks on Access Privacy in Information Centric Networks and Countermeasures

“…However, the relevant solution in [20] is analogous to making names (addresses) unpredictable, which is limited as admitted by the authors of [20], and inapplicable to ICN as discussed in §1.2 (suggested in [29] concurrently with [20]) Future Internet Architectures: Other architectures that date prior to the introduction of CCN [24] and NDN [45] include TRIAD [21] (the work that pioneered the concept of ICN), ROFL [11], and DONA [28]. Other recent architectures include XIA [6], [22], CONET [14], DACON [27], and SCION [47] (where the latter mainly addresses routing). Some of these architectures do not specify how caching is implemented whereas others do.…”

Multipath Inter-Domain Routing Decision Verification Protocol

“…Both soBGP [3] and psBGP [4] are improved from BGP, and attempt to achieve a reality balance in security overhead, router processing capability and deployment cost. The inter-domain routing protocol in SCION [5] is not based on BGP, in which every entity applies self-certifying address [8] to resist attacks such as forgery and prefix hijack etc. But routing security protocols designed from the point of protection have to alter the message formats of available routing protocols.…”

“…More than 20 years ago, the initial version of BGP supposed that the protocol should run in homogenous autonomous domains with mutual trust, but unexpectedly the Internet has evolved into a heterogeneous global information infrastructure with various conflicts of interest [1]. Most of current researches [2][3][4][5][6] on inter-domain secure routing focus on routing source credibility(source authentication) and path information trustability (path authentication ) while another important point (policy authentication) has seldom been paid attention to. Furthermore, there is less concern for the trust problem of inter-domain routing policy enforcement.…”

Xia

“…The SCION architecture, illustrated in Figure 8, features scalability, control, and isolation for secure and highly available host-to-host communication [30]. The essential concept in SCION is network isolation that divides Autonomous Systems (ASes) into Trust Domains (TDs) that separate mutually distrustful entities, reducing the overhead of security mechanisms.…”