Publications from conferences, workshops, and journals are listed below. Please also see the NDN Technical Reports and Technical Presentations.
2023
Yu, Tianyuan; Xie, Hongcheng; Liu, Siqi; Ma, Xinyu; Patil, Varun; Jia, Xiaohua; Zhang, Lixia
CLedger: A Secure Distributed Certificate Ledger via Named Data Proceedings Article
In: ICC 2023 - IEEE International Conference on Communications, pp. 5091–5096, 2023, (ISSN: 1938-1883).
Abstract | Links | BibTeX | Tags: Security, trust management
@inproceedings{yu_cledger_2023,
title = {CLedger: A Secure Distributed Certificate Ledger via Named Data},
author = {Tianyuan Yu and Hongcheng Xie and Siqi Liu and Xinyu Ma and Varun Patil and Xiaohua Jia and Lixia Zhang},
url = {https://ieeexplore.ieee.org/abstract/document/10279244},
doi = {10.1109/ICC45041.2023.10279244},
year = {2023},
date = {2023-05-01},
urldate = {2023-05-01},
booktitle = {ICC 2023 - IEEE International Conference on Communications},
pages = {5091–5096},
abstract = {Named-Data Networking (NDN) is a novel network that secures network communication by fetching semantically named and secured data. All data packets in NDN are signed by producers and verified by data consumers. Therefore, it is vital to have producers' certificates available all the time. In this paper, we describe the design of CLedger, a secure distributed certificate ledger, to ensure certificate availability in NDN. CLedger logs certificate records in an immutable Directed Acyclic Graph (DAG) structure and replicates the DAG among a set of distributed loggers. We implemented CLedger using NDN's pub/sub API, and evaluated our design through an emulated deployment setting. Our initial evaluation results show that CLedger is effective, efficient, and resilient to failures.},
note = {ISSN: 1938-1883},
keywords = {Security, trust management},
pubstate = {published},
tppubtype = {inproceedings}
}
Named-Data Networking (NDN) is a novel network that secures network communication by fetching semantically named and secured data. All data packets in NDN are signed by producers and verified by data consumers. Therefore, it is vital to have producers' certificates available all the time. In this paper, we describe the design of CLedger, a secure distributed certificate ledger, to ensure certificate availability in NDN. CLedger logs certificate records in an immutable Directed Acyclic Graph (DAG) structure and replicates the DAG among a set of distributed loggers. We implemented CLedger using NDN's pub/sub API, and evaluated our design through an emulated deployment setting. Our initial evaluation results show that CLedger is effective, efficient, and resilient to failures.
2022
Yu, Tianyuan; Xie, Hongcheng; Liu, Siqi; Ma, Xinyu; Jia, Xiaohua; Zhang, Lixia
CertRevoke: A Certificate Revocation Framework for Named Data Networking Proceedings Article
In: Proceedings of the 9th ACM Conference on Information-Centric Networking, pp. 80–90, Association for Computing Machinery, Osaka, Japan, 2022, ISBN: 9781450392570.
Abstract | Links | BibTeX | Tags: certificate revocations, Security, trust management
@inproceedings{yu2022certrevoke:,
title = {CertRevoke: A Certificate Revocation Framework for Named Data Networking},
author = {Tianyuan Yu and Hongcheng Xie and Siqi Liu and Xinyu Ma and Xiaohua Jia and Lixia Zhang},
url = {https://doi.org/10.1145/3517212.3558079},
doi = {10.1145/3517212.3558079},
isbn = {9781450392570},
year = {2022},
date = {2022-01-01},
urldate = {2022-01-01},
booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},
pages = {80–90},
publisher = {Association for Computing Machinery},
address = {Osaka, Japan},
series = {ICN '22},
abstract = {Named Data Networking (NDN) secures network communications by requiring all data packets to be signed upon production. This requirement makes usable and efficient NDN certificate issuance and revocation essential for NDN operations. In this paper, we first investigate and clarify core concepts related to NDN certificate revocation, then proceed with the design of CertRevoke, an NDN certificate revocation framework. CertRevoke utilizes naming conventions and trust schema to ensure certificate owners and issuers legitimately produce in-network cacheable records for revoked certificates. We evaluate the security properties and performance of CertRevoke through case studies. Our results show that deploying CertRevoke in an operational NDN network is feasible.},
keywords = {certificate revocations, Security, trust management},
pubstate = {published},
tppubtype = {inproceedings}
}
Named Data Networking (NDN) secures network communications by requiring all data packets to be signed upon production. This requirement makes usable and efficient NDN certificate issuance and revocation essential for NDN operations. In this paper, we first investigate and clarify core concepts related to NDN certificate revocation, then proceed with the design of CertRevoke, an NDN certificate revocation framework. CertRevoke utilizes naming conventions and trust schema to ensure certificate owners and issuers legitimately produce in-network cacheable records for revoked certificates. We evaluate the security properties and performance of CertRevoke through case studies. Our results show that deploying CertRevoke in an operational NDN network is feasible.
Yu, Tianyuan; Xie, Hongcheng; Liu, Siqi; Ma, Xinyu; Jia, Xiaohua; Zhang, Lixia
CertRevoke: a certificate revocation framework for named data networking Proceedings Article
In: Proceedings of the 9th ACM Conference on Information-Centric Networking, pp. 80–90, Association for Computing Machinery, New York, NY, USA, 2022, ISBN: 978-1-4503-9257-0.
Abstract | Links | BibTeX | Tags: certificate revocations, Security, trust management
@inproceedings{yu_certrevoke_2022,
title = {CertRevoke: a certificate revocation framework for named data networking},
author = {Tianyuan Yu and Hongcheng Xie and Siqi Liu and Xinyu Ma and Xiaohua Jia and Lixia Zhang},
url = {https://dl.acm.org/doi/10.1145/3517212.3558079},
doi = {10.1145/3517212.3558079},
isbn = {978-1-4503-9257-0},
year = {2022},
date = {2022-09-01},
urldate = {2022-09-01},
booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},
pages = {80–90},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
series = {ICN '22},
abstract = {Named Data Networking (NDN) secures network communications by requiring all data packets to be signed upon production. This requirement makes usable and efficient NDN certificate issuance and revocation essential for NDN operations. In this paper, we first investigate and clarify core concepts related to NDN certificate revocation, then proceed with the design of CertRevoke, an NDN certificate revocation framework. CertRevoke utilizes naming conventions and trust schema to ensure certificate owners and issuers legitimately produce in-network cacheable records for revoked certificates. We evaluate the security properties and performance of CertRevoke through case studies. Our results show that deploying CertRevoke in an operational NDN network is feasible.},
keywords = {certificate revocations, Security, trust management},
pubstate = {published},
tppubtype = {inproceedings}
}
Named Data Networking (NDN) secures network communications by requiring all data packets to be signed upon production. This requirement makes usable and efficient NDN certificate issuance and revocation essential for NDN operations. In this paper, we first investigate and clarify core concepts related to NDN certificate revocation, then proceed with the design of CertRevoke, an NDN certificate revocation framework. CertRevoke utilizes naming conventions and trust schema to ensure certificate owners and issuers legitimately produce in-network cacheable records for revoked certificates. We evaluate the security properties and performance of CertRevoke through case studies. Our results show that deploying CertRevoke in an operational NDN network is feasible.
Yu, Tianyuan; Ma, Xinyu; Xie, Hongcheng; Kocaoğullar, Yekta; Zhang, Lixia
Intertrust: establishing inter-zone trust relationships Proceedings Article
In: Proceedings of the 9th ACM Conference on Information-Centric Networking, pp. 180–182, Association for Computing Machinery, New York, NY, USA, 2022, ISBN: 978-1-4503-9257-0.
Abstract | Links | BibTeX | Tags: Security, trust management
@inproceedings{yu_intertrust_2022,
title = {Intertrust: establishing inter-zone trust relationships},
author = {Tianyuan Yu and Xinyu Ma and Hongcheng Xie and Yekta Kocaoğullar and Lixia Zhang},
url = {https://doi.org/10.1145/3517212.3559489},
doi = {10.1145/3517212.3559489},
isbn = {978-1-4503-9257-0},
year = {2022},
date = {2022-09-01},
urldate = {2022-09-01},
booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},
pages = {180–182},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
series = {ICN '22},
abstract = {An NDN network is made of named entities with various trust relations between each other. Entities are organized into trust zones. Each trust zone contains the entities under the same administrative control. This work-in-progress explores an approach to establishing trust relations between trust zones.},
keywords = {Security, trust management},
pubstate = {published},
tppubtype = {inproceedings}
}
An NDN network is made of named entities with various trust relations between each other. Entities are organized into trust zones. Each trust zone contains the entities under the same administrative control. This work-in-progress explores an approach to establishing trust relations between trust zones.