针对内容中心网络中名字解析系统的DoS攻击建模与分析*

内容/信息中心网络（Information-centric networking, ICN）的一个主要特征是用户直接利用内容名请求内容，网络根据策略选择合适的内容拥有者为用户服务。名字解析系统可用于建立、维护和发布内容名与内容拥有者间的映射关系，是保障网络正常工作的核心部分，必然会成为被攻击的重点目标。根据名字解析系统的特点，分析了针对名字解析系统的拒绝服务（Denial of service, DoS）攻击，对其攻击效果/程度进行建模。数值计算结果表明名字解析系统本身易于受到网络攻击，但同时选择内容拥有者的策略将有助于减轻攻击效果。

Analysis of a DoS Attack on name resolution system in information-centric network

In Information-centric networking (ICN), name resolution systems can be used to resolve content name to a particular content provider. Due to the importance of the name resolution system, it will likely to be a target of attack. This paper focuses on denial of service (DoS) attack, one of the most serious attacks, on name resolution system. This paper models the attack and analyze on the effect of DoS attack based on the model. Simulation results show that the name resolution system itself is vulnerable and the appropriate choice of dissemination policy will help in slowing down the attack.