A Semantic Firewall for Content-Centric Networking

David Goergen (1, 2) , Thibault Cholez (1, 2) , Jérôme François (1, 2) , Thomas Engel (1, 2)

1 SnT - Interdisciplinary Centre for Security, Reliability and Trust [Luxembourg]
2 Uni.lu - Université du Luxembourg

Content-Centric Networking (CCN) is a promising routing paradigm for content dissemination over a future Internet based on named data instead of named hosts. The CCN architecture has aspects that provide more scalability, security, collaborative and pervasive networking. However, several key components that secures the current Internet are still missing in CCN, in particular a firewall able to enforce security policies. We provide a comprehensive study of CCN security requirements from which we design the first CCN-compliant firewall, including syntax and definition of rules. In particular, based on CCN features, our firewall can filter packets according to both their authentication and the semantics of the content name. We also provide a performance evaluation of our prototype.

Mots clés: Content-Centric Networking; security; firewall

Domaines: Réseaux et télécommunications [cs.NI]

David Goergen, Thibault Cholez, Jérôme François, Thomas Engel. A Semantic Firewall for Content-Centric Networking. 2013 IFIP/IEEE International Symposium on Integrated Network Management (IM2013): Mini-Conference, May 2013, Ghent, Belgium. pp.478-484. ⟨hal-00829615⟩