Christopher A. Wood

Secure Fragmentation for Content-Centric Networks

C. Ghali, A. Narayanan, D. Oran, G. Tsudik, and C. A. Wood

14th IEEE International Symposium on Network Computing and Applications (NCA 2015), Cambridge, MA, USA. September 2015

Materials

Abstract

Content-Centric Networking (CCN) is a communication paradigm that emphasizes content distribution. Named-Data Networking (NDN) is an instantiation of CCN, a candidate Future Internet Architecture. NDN supports human-readable content naming and router-based content caching which lends itself to efficient, secure, and scalable content distribution. Because of NDN's fundamental requirement that each content object must be signed by its producer, fragmentation has been considered incompatible with NDN since it precludes authentication of individual content fragments by routers. The alternative is to perform hop-by-hop reassembly, which incurs prohibitive delays. In this paper, we show that secure and efficient content fragmentation is both possible and even advantageous in NDN and similar content-centric network architectures that involve signed content. We design a concrete technique that facilitates efficient and secure content fragmentation in NDN, discuss its security guarantees and assess performance. We also describe a prototype implementation and compare performance of cut-through with hop-by-hop fragmentation and reassembly.

BibTeX

@inproceedings{ghali2015secure,
 title={Secure fragmentation for content-centric networks},
 author={Ghali, Cesar and Narayanan, Ashok and Oran, David and Tsudik, Gene and Wood, Christopher A},
 booktitle={Network Computing and Applications (NCA), 2015 IEEE 14th International Symposium on},
 pages={47--56},
 year={2015},
 organization={IEEE}
 }