Compute-Centric Networking At The Edge: An Autonomous Driving Use-Case

This article describes how the named data networking (NDN) has recently received a lot of attention as a potential information-centric networking (ICN) architecture for the future Internet. The NDN paradigm has a great potential to efficiently address and solve the current seminal IP-based IoT architecture issues and requirements. NDN can be used with different sets of caching algorithms and caching replacement policies. The authors investigate the most suitable combination of these two features to be implemented in an IoT environment. For this purpose, the authors first reviewed the current research and development progress in ICN, then they conduct a qualitative comparative study of the relevant ICN proposals and discuss the suitability of the NDN as a promising architecture for IoT. Finally, they evaluate the performance of NDN in an IoT environment with different caching algorithms and replacement policies. The obtained results show that the consumer-cache caching algorithm used with the Random Replacement (RR) policy significantly improve NDN content validity in an IoT environment.

Named Data Networking (NDN) presents strong bandwidth benefits on edge networks because its in-network caching design is probably fit for popularity and locality. However, separate NDN edge regions cannot be efficiently connected over IP backbone world, slowing down the deployment of NDN edges. Due to the difference of stateful NDN and stateless IP in forwarding principles, the coexistence of two protocols is difficult and challenging in the network layer. In this paper, we propose iGate, an NDN gateway design for tunneling over IP world, to bridge two kinds of protocols in the same layer. iGate translates protocols between stateful NDN and stateless IP by two temporary tables. It considers many factors about gateway efficiency, like table tunning, minimal NDN integration, TCP/UDP alternatives. We evaluate the performance of iGate with a real implementation on Linux and the results show that it can achieve more than 85.03% translation efficiency and less than 29% protocol conversion delay compared with IP VPN which uses the typical tunneling technology over IP network. Our work presents a practical and highly-efficient solution to assemble NDN edges into IP world, and can be applied to other similar Information-Centric Networking (ICN) designs.

Disasters are uncertain occasions that can impose a drastic impact on human life and building infrastructures. Information and Communication Technology (ICT) plays a vital role in coping with such situations by enabling and integrating multiple technological resources to develop Disaster Management Systems (DMSs). In this context, a majority of the existing DMSs use networking architectures based upon the Internet Protocol (IP) focusing on location-dependent communications. However, IP-based communications face the limitations of inefficient bandwidth utilization, high processing, data security, and excessive memory intake. To address these issues, Named Data Networking (NDN) has emerged as a promising communication paradigm, which is based on the Information-Centric Networking (ICN) architecture. An NDN is among the self-organizing communication networks that reduces the complexity of networking systems in addition to provide content security. Given this, many NDN-based DMSs have been proposed. The problem with the existing NDN-based DMS is that they use a PULL-based mechanism that ultimately results in higher delay and more energy consumption. In order to cater for time-critical scenarios, emergence-driven network engineering communication and computation models are required. In this paper, a novel DMS is proposed, i.e., Named Data Networking Disaster Management (NDN-DM), where a producer forwards a fire alert message to neighbouring consumers. This makes the nodes converge according to the disaster situation in a more efficient and secure way. Furthermore, we consider a fire scenario in a university campus and mobile nodes in the campus collaborate with each other to manage the fire situation. The proposed framework has been mathematically modeled and formally proved using timed automata-based transition systems and a real-time model checker, respectively. Additionally, the evaluation of the proposed NDM-DM has been performed using NS2. The results prove that the proposed scheme has reduced the end-to-end delay up from 2 % to 10 % and minimized up to 20 % energy consumption, as energy improved from 3 % to 20 % compared with a state-of-the-art NDN-based DMS.

Named data networking (NDN) is an emerging information-centric networking paradigm, in which the Internet of Things (IoT) achieves excellent scalability. Recent literature proposes the concept of NDN-IoT, which maximizes the expansion of IoT applications by deploying NDN in the IoT. In the NDN, the security is built into the network by embedding a public signature in each data package to verify the authenticity and integrity of the content. However, signature schemes in the NDN-IoT environment are facing several challenges, such as signing security challenge for resource-constrained IoT end devices (EDs) and verification efficiency challenge for NDN routers. This article mainly studies the data package authentication scheme in the package-level security mechanism. Based on mobile edge computing (MEC), an efficient certificateless group signature scheme featured with anonymity, unforgeability, traceability, and key escrow resilience is proposed. The regional and edge architecture is utilized to solve the device management problem of IoT, reducing the risks of content pollution attacks from the data source. By offloading signature pressure to MEC servers, the contradiction between heavy overhead and shortage of ED resources is avoided. Moreover, the verification efficiency in NDN router is much improved via batch verification in the proposed scheme. Both security analysis and experimental simulations show that the proposed MEC-based certificateless group signature scheme is provably secure and practical.

Research in Information-Centric Networking (ICN) and Named Data Networking (NDN) has produced many protocol designs and software prototypes, but they need to be validated and evaluated by real usage on the Internet, which is also critical to the realization of the ICN/NDN vision in the long run. This article presents the first Internet-scale adaptive video streaming service over NDN, which allows regular users to watch videos using NDN technology with no software installation or manual configuration. Since mid-2019, the official NDN website [1] has started using our service to deliver its videos to Internet users over the global NDN testbed, showcasing the feasibility of NDN. We conduct real-world experiments on the NDN testbed to validate the proper implementation of the client, network, and server sides of the proposed system and also evaluate the performance of our video streaming service.

Named Data Networking (NDN) is an implementation of Information-Centric Networking (ICN) that has emerged as a promising candidate for the Future Internet Architecture (FIA). In contrast to traditional networking protocols, NDN’s focus is on content, rather than the source of the content. NDN enables name-based routing and location-independent data retrieval, which gives NDN the ability to support the highly dynamic nature of mobile networks. Among other important features, NDN integrates security mechanisms and prioritizes protecting content over communication channels through cryptographic signatures. However, the data verification process that NDN employs may cause significant delays, especially in mobile networks and vehicular networks. This aspect makes it unsuitable for time-critical and sensitive applications such as the sharing of safety messages. Therefore, in this work, we propose NDN-BDA, a blockchain-based decentralized mechanism that provides a faster and more efficient data authenticity mechanism for NDN-based vehicular networks.

As a leading architecture of Information-Centric Networking (ICN), Named Data Networking (NDN) plays an important role in the future network construction. NDN retrieves and identifies a data packet according to the packet's name instead of its IP address. Conventional protocols of TCP/IP Internet are unsuitable for NDN. Therefore, Named-data Link State Routing protocol (NLSR) is proposed as an intra-domain routing protocol for NDN. Although NLSR applies a five-layer trust model to guarantee its data security, there are still a lot of security issues in its data access mechanism, such as the fake and leakage of data. In this paper, we apply Communicating Sequential Processes (CSP) to formalize this mechanism. Using Process Analysis Toolkit (PAT), we verify four properties, including deadlock freedom, data availability, data security and data decryption. According to the verification results, the trust model cannot protect the data from fake and leakage once intruders appear. We adopt a method similar to digital signature in the first improved model. However, the process of obtaining keys still needs to be executed multiple times during the verification of a data packet. To further accelerate the key fetching and verification process, all the keys, needed to validate a data packet, are packaged in a special packet of the second improvement.

Information-Centric Networking (ICN) is a new communication paradigm that replaces the host addresses by the name of content; Named Data Networking (NDN) is a promising ICN architecture that has attracted research attention in recent years. NDN is a receiver-driven architecture implements pull-based communication in the form of one-interest-one-data. This model poses different challenges, especially from the transport layer perspective. In contact to IP-based networks where the congestion is handled in an end-to-end manner, NDN cannot apply the same concept, while most of the existing solutions are based on hop-by-hop connection. In this paper, we present a new congestion control mechanism for NDN based on link quality estimation. We focus our efforts to provide fast data transmission, decrease packet dropping rate, and maximize the link utilization. The simulation results show that our solution outperforms the NDN schemes in terms of throughput and drop packets.

Named data networking (NDN) and edge cloud computing (ECC) are emerging technologies that are considered as the most representative technologies for the future Internet. Both technologies are the promising enabler for the future Internet such as fifth generation (5G) and beyond which requires fast information response time. We believe that clear benefits can be achieved from the interplay of NDN and ECC and enables future network technology to be much more flexible, secure and efficient. In this paper, therefore, we integrate NDN with ECC in order to achieve fast information response time. Our framework is based on N-Tier architecture and comprises of three main Tiers. The NDN is located at the Tier1 (Things/end devices) and comprises of all the basic functionalities that connect Internet of Things (IoT) devices with Tier 2 (Edge Computing), where we have deployed our Edge node application. The Tier 2 is then further connected with Tier 3 (Cloud Computing), where our Cloud node application is deployed at multiple hops on the Microsoft Azure Cloud machine located in Virginia, WA, USA. We implement an NDN-based ECC framework and the outcomes are evaluated through testbed and simulations in terms of interest aggregation, round trip time (RTT), service lookup time with single query lookup time and with various traffic loads (load-based lookup time) from the IoT devices. Our measurements show that enabling NDN with edge computing is a promising approach to reduce latency and the backbone network traffic and capable of processing large amounts of data quickly and delivering the results to the users in real time.

A trust management scheme to secure mobile information centric networks

A Lightweight Forwarding Strategy for Named Data Networking in Low-end IoT

With information becoming a first-class citizen on the Internet, information-centric networking (ICN) is considered as a promising direction for the future Internet. Named data networking (NDN) is a prominent example of emerging ICN architectures. Unfortunately, NDN is vulnerable to various attacks targeting its in-network caching mechanism. In this paper, we focus on the false-locality pollution attack, in which an adversary repeatedly requests a number of unpopular data objects to waste the precious cache space on the NDN router and to reduce normal users’ hit ratios. With simulation experiments, we show that such an attack can cause considerable damage to the NDN network. To detect and mitigate such an attack, we introduce an algorithm that exploits the diversity of the Interest traversing paths within an Internet service provider’s point-of-presence network. We also propose inexpensive methodologies based on the probabilistic counting and Bloom filter techniques to implement the algorithm on an NDN router. The experimental results indicate that our proposed algorithm is effective in thwarting false-locality pollution. We also experiment with strategies that the adversary may utilize against our antipollution algorithm and demonstrate that such strategies are either ineffective or impractical in the real world.

Στη σύγχρονη εποχή του Διαδικτύου, η εστίαση τόσο στους τελικούς χρήστες όσο και στα ίδια τα δεδομένα έχουν εξελιχθεί σε δύο θεμελιώδεις πυλώνες. Αυτό οφείλεται κυρίως στη σημαντική διεύρυνση των πηγών δεδομένων, ιδιαίτερα με την εμφάνιση του Διαδικτύου των Πραγμάτων (Internet of Things (IoT)). Η εξέλιξη αυτή απαιτεί εξειδικευμένες λύσεις για την αποδοτική διαχείριση της συνεχώς αυξανόμενης κίνησης των δεδομένων αλλά και την υποστήριξη σύνθετων τύπων δεδομένων, όπως το πολυμεσικό περιεχόμενο, ενώ παράλληλα είναι ανάγκη να διασφαλίζεται η αξιοπιστία των δεδομένων, η ανθεκτικότητα στις επιθέσεις και υψηλή Ποιότητα Εμπειρίας (Quality of Experience (QoE)) για τους τελικούς χρήστες. Στην παρούσα διδακτορική διατριβή, αξιοποιούμε την εμπιστοσύνη που βασίζεται στη φήμη (reputation-based trust) ως ένα βασικό εργαλείο για την αντιμετώπιση αυτών των προκλήσεων σε δύο διακεκριμένα πρότυπα δικτύων επόμενης γενιάς: τα Πληροφοριοκεντρικά Δίκτυα (Information-Centric Networking (ICN)) και τα Δίκτυα Υπολογιστικού Νέφους (Cloud Networking). Στο πρώτο μέρος αυτής της διατριβής, διερευνούμε πώς η εμπιστοσύνη που βασίζεται στη φήμη μπορεί να ενδυναμώσει τα Πληροφοριοκεντρικά Δίκτυα· εστιάζοντας στην Named Data Networking (NDN), την πιο διαδεδομένη πληροφοριοκεντρική αρχιτεκτονική, διερευνούμε την εμπιστοσύνη που βασίζεται στη φήμη ως μέσο για την αντιμετώπιση ορισμένων εγγενών ευπαθειών των NDN δικτύων, ιδίως στις λειτουργίες ασφάλειας και προσωρινής αποθήκευσης. Σε αυτό το πλαίσιο, ασχολούμαστε με διάφορα σενάρια χρήσης και δικτυακές υποδομές, με στόχο να αναδείξουμε τις δυνατότητες της εμπιστοσύνης που βασίζεται στη φήμη σε ένα ευρύ φάσμα εφαρμογών. Αρχικά, δείχνουμε πώς η φήμη μπορεί να λειτουργήσει ως ένας συμπληρωματικός μηχανισμός στα υφιστάμενα συστήματα ασφαλείας σε ad hoc NDN δίκτυα. Εφαρμόζουμε έναν μηχανισμό που βασίζεται στη φήμη και αποδεικνύουμε τα οφέλη του όσον αφορά τη χρηστικότητα, καθώς και το επικοινωνιακό και υπολογιστικό κόστος. Στη συνέχεια, προτείνουμε δύο διακριτούς μηχανισμούς βασισμένους στη φήμη, καθένας από τους οποίους έχει σχεδιαστεί για την αντιμετώπιση μιας διαφορετικής κρίσιμης απειλής ασφαλείας των NDN δικτύων: συγκεκριμένα, τις επιθέσεις Δηλητηρίασης Περιεχομένου (Content Poisoning Attacks) και των επιθέσεων Ταλάντωσης του Ρυθμού Μετάδοσης (Bitrate Oscillation Attacks). Τα πειραματικά αποτελέσματα δείχνουν ότι η φήμη μπορεί να αποτελέσει ένα αποτελεσματικό αντίμετρο για τον μετριασμό των επιθέσεων και στις δύο περιπτώσεις. Πιο συγκεκριμένα, ο πρώτος μηχανισμός περιορίζει σημαντικά τη διάδοση του “δηλητηριώδους”/κακόβουλου περιεχομένου στο δίκτυο αποφεύγοντας κακόφημους παραγωγούς περιεχομένου. Ο δεύτερος μηχανισμός παρακολουθεί τις ταλαντώσεις στην ποιότητα μετάδοσης κατά τη διάρκεια μιας συνόδου πολυμεσικής ροής (streaming sessions) και προσαρμόζει την πολιτική προσωρινής αποθήκευσης ανάλογα, ώστε τελικά να διασφαλίσει εμπειρία χρηστών παρόμοια με όταν η μετάδοση γίνεται κανονικά, χωρίς επιθέσεις. Τέλος, παρουσιάζουμε μια πολιτική προσωρινής αποθήκευσης βασισμένη στη φήμη, ειδικά σχεδιασμένη ώστε να λαμβάνει υπόψιν την ανοχή σε σφάλματα και την εξοικονόμηση ενέργειας σε NDN IoT δίκτυα. Τα πειραματικά αποτελέσματα ανέδειξαν τα πλεονεκτήματα της λύσης μας ως προς την αξιοποίηση της προσωρινής αποθήκευσης και την ενεργειακή αποδόση. Το δεύτερο ζήτημα που εξετάζεται σε αυτή τη διατριβή είναι η παρακολούθηση της απόδοσης των υπηρεσιών υπολογιστικού νέφους λαμβάνοντας υπόψιν την εμπειρία του χρήστη, δίνοντας έμφαση στην ανάγκη ενσωμάτωσης αποκλειστικά αξιόπιστων αξιολογήσεων από χρήστες. Παρουσιάζουμε το Feed4Cloud, μια λύση βασισμένη στο blockchain που χρησιμοποιεί τη φήμη για να διασφαλίσει τη δίκαιη αξιολόγηση των υπηρεσιών με βάση την εμπειρία των χρηστών. Η φήμη της υπηρεσίας εντάσσεται στη διαδικασία παρακολούθησης της απόδοσής της ως ένα επιπλέον κριτήριο, ώστε να βελτιωθεί, τελικά, η ορχήστρωση των υπηρεσιών σε όλο το υπολογιστικό εύρος - από το νέφος έως τις άκρες του δικτύου. Τα αντίστοιχα πειραματικά αποτελέσματα δείχνουν ότι το Feed4Cloud μπορεί να εντοπίσει και να φιλτράρει αποτελεσματικά τις μη έγκυρες αξιολογήσεις των χρηστών, ακόμη και αν η στρατηγική της επίθεσης είναι αρκετά πολύπλοκη, ενώ η αξιολόγηση των υπηρεσιών με βάση την εμπειρία των χρηστών διεξάγεται με συνέπεια και αξιοπιστία. Από πλευράς υλοποίησης, στο πρώτο μέρος της διατριβής οι προτεινόμενοι μηχανισμοί έχουν αναπτυχθεί και επικυρωθεί σε περιβάλλοντα προσομοίωσης, ενώ, στο δεύτερο μέρος, παρέχουμε ένα πραγματικό πρωτότυπο του συστήματος. Μέσω εκτεταμένων πειραμάτων, η παρούσα διατριβή καταδεικνύει την αποτελεσματικότητα των μηχανισμών εμπιστοσύνης που βασίζονται στη φήμη για την ενίσχυση της ασφάλειας και τη διατήρηση της εμπειρίας των χρηστών σε υψηλά επίπεδα σε πληροφοριοκεντρικά δίκτυα και δίκτυα υπολογιστικού νέφους. Συνολικά, η διατριβή συνεισφέρει με τεκμηριωμένα συμπεράσματα για την πρακτική υλοποίηση και τα οφέλη στην απόδοση των λύσεων που βασίζονται στη φήμη, συμβάλλοντας στην ανάπτυξη ανθεκτικών, προσαρμοστικών και εύχρηστων μοντέλων εμπιστοσύνης για δίκτυα επόμενης γενιάς.

Information-Centric Networking (ICN) takes advances in content distribution, thanks to the in-network caches which naturally reduce the delay of upper-layer applications. Though attaining high dissemination efficiency, the in-network caching amplifies the challenges in the consistency of cached copies. Since ICN decouples data from the locations, it's hard for ICN to synchronize the caches efficiently once an update occurs, which could lead to potential issues of correctness and security. Herein, we propose a novel cache consistency mechanism based on role division, namely RD-CCM, to achieve strong consistency in ICN. RD-CCM divides network nodes into several roles and applies the Lease model among specific routers to maintain synchronization with high efficiency. We set up an adaptive parametric model to determine the Lease duration of RD-CCM, which balances the cost between storage and communication. Further, we optimize RD-CCM based on content popularity and Invertible Bloom Filter (IBF), diminishing the overhead of synchronization. We simulate RD-CCM on ndnSim to evaluate its performance, compared against Time- To-Live (TTL) and Polling-Every- Time (PET), which are employed in Named Data Networking (NDN). RD-CCM reduces the average hop counts by 32.5% compared against NDN-PET and reduces the cache staleness rate by 59.2% compared against NDN-TTL.

Named Data Networking (NDN) has emerged as a promising information-centric networking paradigm that addresses the limitations of the traditional IP-based Internet architecture. The core principle of NDN relies on content naming instead of host addressing, to provide efficient, secure, and scalable content delivery. Routing is a critical component of NDN and is responsible for discovering and maintaining optimal paths to named content. This paper presents a comprehensive review of routing techniques in NDN, focusing on the design principles, algorithms, and performance metrics, especially in wired network architecture. We first summarize the NDN architecture and discuss its key components. We then delve into the fundamental routing concepts in NDN and categorize and examine various routing techniques, including link state, distance vector, and centralized approaches based on Software Defined Network. We also summarize the relevant research efforts proposed to address NDN routing challenges by focusing more on wired network architecture. Finally, we identify open research issues and future directions in NDN routing, emphasizing the need for scalable, efficient, and secure routing techniques that can fulfill the growing demands of the modern Internet. In conclusion, this review serves as a valuable reference for researchers and practitioners in NDN, offering a comprehensive understanding of the current state-of-the-art routing techniques, limitations, and potential future advancements.