[Ndn-interest] NACK
Klaus Schneider
klaus at email.arizona.edu
Wed Jul 6 19:12:29 PDT 2016
I'm not an expert in NDN security, but it looks like it can:
http://named-data.net/doc/ndn-cxx/current/tutorials/security-library.html#signing-interests
http://named-data.net/doc/ndn-cxx/current/tutorials/signed-interest.html
Best regards.
On 06.07.2016 18:49, Tanusree Chatterjee wrote:
> Can any special Interest be signed to check its authenticity on other side?
> On Jul 7, 2016 5:37 AM, "Klaus Schneider" <klaus at email.arizona.edu
> <mailto:klaus at email.arizona.edu>> wrote:
> >
> > I think there are at least two cases in which the verification fails:
> 1) random errors which couldn't be corrected by a lower layer and 2)
> purposeful manipulation of the packet by a malicious attacker.
> >
> > I don't know how easy these are to distinguish, but in both cases
> it's likely that the in-network routers have to solve the problem by
> forwarding interests on a different path.
> >
> > There is a trade-off in how persistently routers should retransmit
> before notifying the consumer: In one extreme all routers on the path
> try all of their paths before sending a NACK back (potentially
> increasing the delay to the point where the consumer no longer needs the
> data). In the other extreme, the NACK goes directly to the consumer and
> then the consumer sends a retransmission to tell the routers to try a
> different path (increasing delay and packet overhead compared to routers
> retransmitting on their own).
> >
> > It is also useful to identify how fine-granular the problem is: Did
> the data corruption affect 1) just a single packet, 2) many/most packets
> under that FIB-prefix-face combination, or 3) all packets send over that
> face?
> >
> > This information can then be used to make better decisions at the
> forwarding layer, like moving traffic of the affected "flow"/FIB
> prefix/face. I think the problem is quite similar to the one of congestion.
> >
> > Best regards,
> > Klaus
> >
> >
> >
> >
> >
> >
> >
> > On 30.06.2016 14:29, Cesar Ghali wrote:
> >>
> >> I just want to highlight that interest NACKs that Lixia mentioned are
> >> studied as two types of NACK messages in the paper that Gene shared
> earlier:
> >> http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=7288477
> >>
> >> Cesar
> >>
> >>
> >> On Wednesday, June 29, 2016, Lixia Zhang <lixia at cs.ucla.edu
> <mailto:lixia at cs.ucla.edu>
> >> <mailto:lixia at cs.ucla.edu <mailto:lixia at cs.ucla.edu>>> wrote:
> >>
> >> one detail that I have not seen mentioned so far: interest NACK
> >> versus data packet NACK.
> >>
> >> It seems to me that interest NACK is relatively well understood: a
> >> forwarding node failed to forward a received interest hence
> >> generates a NACK to its previous hop.
> >> data NACK seems to me not understood as fully:
> >> a) if a consumer gets a data packet that's not what it wants, it'd
> >> retry the interest in some way;
> >> b) any other forwarding node could drop an incorrect data packet, it
> >> can; whether it should generate a NACK on behalf of the consumer
> >> seems a separable question.
> >>
> >>
> >> > On Jun 28, 2016, at 1:47 AM, Tanusree Chatterjee
> >> <tnsr.chatterjee at gmail.com <mailto:tnsr.chatterjee at gmail.com>>
> wrote:
> >> >
> >> > If a data packet is modified and detected during verification,
> >> can forwarder send a NACK. How the data can be resend in this case?
> >> If consumer is not satisfied it has to send the same interest again,
> >> is there any other way out to get the data which may not been
> >> correctly received due to some modification.
> >> >
> >> > -- Regards,
> >> > Tanusree Chatterjee
> >> >
> >> > _______________________________________________
> >> > Ndn-interest mailing list
> >> > Ndn-interest at lists.cs.ucla.edu
> <mailto:Ndn-interest at lists.cs.ucla.edu>
> >> > http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
> >>
> >>
> >> _______________________________________________
> >> Ndn-interest mailing list
> >> Ndn-interest at lists.cs.ucla.edu <mailto:Ndn-interest at lists.cs.ucla.edu>
> >> http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
> >>
> >>
> >>
> >> _______________________________________________
> >> Ndn-interest mailing list
> >> Ndn-interest at lists.cs.ucla.edu <mailto:Ndn-interest at lists.cs.ucla.edu>
> >> http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
> >>
> > _______________________________________________
> > Ndn-interest mailing list
> > Ndn-interest at lists.cs.ucla.edu <mailto:Ndn-interest at lists.cs.ucla.edu>
> > http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
>
More information about the Ndn-interest
mailing list