Papers

@inproceedings{yu_cledger_2023,

title = {CLedger: A Secure Distributed Certificate Ledger via Named Data},

author = {Tianyuan Yu and Hongcheng Xie and Siqi Liu and Xinyu Ma and Varun Patil and Xiaohua Jia and Lixia Zhang},

url = {https://ieeexplore.ieee.org/abstract/document/10279244},

doi = {10.1109/ICC45041.2023.10279244},

year  = {2023},

date = {2023-05-01},

urldate = {2023-05-01},

booktitle = {ICC 2023 - IEEE International Conference on Communications},

pages = {5091–5096},

abstract = {Named-Data Networking (NDN) is a novel network that secures network communication by fetching semantically named and secured data. All data packets in NDN are signed by producers and verified by data consumers. Therefore, it is vital to have producers' certificates available all the time. In this paper, we describe the design of CLedger, a secure distributed certificate ledger, to ensure certificate availability in NDN. CLedger logs certificate records in an immutable Directed Acyclic Graph (DAG) structure and replicates the DAG among a set of distributed loggers. We implemented CLedger using NDN's pub/sub API, and evaluated our design through an emulated deployment setting. Our initial evaluation results show that CLedger is effective, efficient, and resilient to failures.},

note = {ISSN: 1938-1883},

keywords = {Security, trust management},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu_new_2023,

title = {A New API in Support of NDN Trust Schema},

author = {Tianyuan Yu and Xinyu Ma and Hongcheng Xie and Yekta Kocaoğullar and Lixia Zhang},

url = {https://dl.acm.org/doi/10.1145/3623565.3623709},

doi = {10.1145/3623565.3623709},

isbn = {9798400704031},

year  = {2023},

date = {2023-10-01},

urldate = {2023-10-01},

booktitle = {Proceedings of the 10th ACM Conference on Information-Centric Networking},

pages = {46–54},

publisher = {Association for Computing Machinery},

address = {New York, NY, USA},

series = {ACM ICN '23},

abstract = {The decade-long experiences from developing applications over Named Data Networking (NDN) have taught us the importance of well-designed libraries that offer support to application developers to support data security. NDN trust schema provides a critical component in the NDN security support, however its implementation and support only started receiving significant attention in recent years. This paper first provides a summary of the existing API support for trust schema, then takes a step forward by developing a new trust schema API, named Envelope. Envelope addresses the application requirements by offering comprehensive trust schema functionalities, an easy-to-write schema language, and an extensible design. To demonstrate the usefulness of Envelope, we develop a blog application which uses Envelope to secure its data. Our results show that Envelope provides effective trust schema support for applications with acceptable overhead.},

keywords = {API, Security, trust schema},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{townley2023secure,

title = {Secure NDN Packet Encapsulation},

author = {Daniel Townley and Young Kim and Fred Douglis and Jesse Elwell and Constantin Serban and Lan Wang and Alex Afanasyev and Lixia Zhang},

url = {https://named-data.net/wp-content/uploads/2023/12/2305ICCNDN-pkt-encryption.pdf},

year  = {2023},

date = {2023-01-01},

urldate = {2023-01-01},

booktitle = {ICC 2023-IEEE International Conference on Communications},

pages = {1106–1111},

organization = {IEEE},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pesavento2022pion:,

title = {PION: Password-based IoT Onboarding Over Named Data Networking},

author = {Davide Pesavento and Junxiao Shi and Kerry McKay and Lotfi Benmohamed},

doi = {10.1109/ICC45855.2022.9839088},

year  = {2022},

date = {2022-01-01},

urldate = {2022-01-01},

booktitle = {ICC 2022 - IEEE International Conference on Communications},

pages = {1070-1075},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{dulal2022building,

title = {Building a Secure MHealth Data Sharing Infrastructure over NDN},

author = {Saurab Dulal and Nasir Ali and Adam Robert Thieme and Tianyuan Yu and Siqi Liu and Suravi Regmi and Lixia Zhang and Lan Wang},

url = {https://doi.org/10.1145/3517212.3558091},

doi = {10.1145/3517212.3558091},

isbn = {9781450392570},

year  = {2022},

date = {2022-01-01},

urldate = {2022-01-01},

booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},

pages = {114–124},

publisher = {Association for Computing Machinery},

address = {Osaka, Japan},

series = {ICN '22},

abstract = {Exploratory efforts in mobile health (mHealth) data collection and sharing have achieved promising results. However, fine-grained contextual access control and real-time data sharing are two of the remaining challenges in enabling temporally-precise mHealth intervention. We have developed an NDN-based system called mGuard to address these challenges. mGuard provides a pub-sub API to let users subscribe to real-time mHealth data streams, and uses name-based access control policies and key-policy attribute-based encryption to grant fine-grained data access to authorized users based on contextual information. We evaluate mGuard's performance using sample data from the MD2K project.},

keywords = {access control, mHealth, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu2022certrevoke:,

title = {CertRevoke: A Certificate Revocation Framework for Named Data Networking},

author = {Tianyuan Yu and Hongcheng Xie and Siqi Liu and Xinyu Ma and Xiaohua Jia and Lixia Zhang},

url = {https://doi.org/10.1145/3517212.3558079},

doi = {10.1145/3517212.3558079},

isbn = {9781450392570},

year  = {2022},

date = {2022-01-01},

urldate = {2022-01-01},

booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},

pages = {80–90},

publisher = {Association for Computing Machinery},

address = {Osaka, Japan},

series = {ICN '22},

abstract = {Named Data Networking (NDN) secures network communications by requiring all data packets to be signed upon production. This requirement makes usable and efficient NDN certificate issuance and revocation essential for NDN operations. In this paper, we first investigate and clarify core concepts related to NDN certificate revocation, then proceed with the design of CertRevoke, an NDN certificate revocation framework. CertRevoke utilizes naming conventions and trust schema to ensure certificate owners and issuers legitimately produce in-network cacheable records for revoked certificates. We evaluate the security properties and performance of CertRevoke through case studies. Our results show that deploying CertRevoke in an operational NDN network is feasible.},

keywords = {certificate revocations, Security, trust management},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu_certrevoke_2022,

title = {CertRevoke: a certificate revocation framework for named data networking},

author = {Tianyuan Yu and Hongcheng Xie and Siqi Liu and Xinyu Ma and Xiaohua Jia and Lixia Zhang},

url = {https://dl.acm.org/doi/10.1145/3517212.3558079},

doi = {10.1145/3517212.3558079},

isbn = {978-1-4503-9257-0},

year  = {2022},

date = {2022-09-01},

urldate = {2022-09-01},

booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},

pages = {80–90},

publisher = {Association for Computing Machinery},

address = {New York, NY, USA},

series = {ICN '22},

abstract = {Named Data Networking (NDN) secures network communications by requiring all data packets to be signed upon production. This requirement makes usable and efficient NDN certificate issuance and revocation essential for NDN operations. In this paper, we first investigate and clarify core concepts related to NDN certificate revocation, then proceed with the design of CertRevoke, an NDN certificate revocation framework. CertRevoke utilizes naming conventions and trust schema to ensure certificate owners and issuers legitimately produce in-network cacheable records for revoked certificates. We evaluate the security properties and performance of CertRevoke through case studies. Our results show that deploying CertRevoke in an operational NDN network is feasible.},

keywords = {certificate revocations, Security, trust management},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu_intertrust_2022,

title = {Intertrust: establishing inter-zone trust relationships},

author = {Tianyuan Yu and Xinyu Ma and Hongcheng Xie and Yekta Kocaoğullar and Lixia Zhang},

url = {https://doi.org/10.1145/3517212.3559489},

doi = {10.1145/3517212.3559489},

isbn = {978-1-4503-9257-0},

year  = {2022},

date = {2022-09-01},

urldate = {2022-09-01},

booktitle = {Proceedings of the 9th ACM Conference on Information-Centric Networking},

pages = {180–182},

publisher = {Association for Computing Machinery},

address = {New York, NY, USA},

series = {ICN '22},

abstract = {An NDN network is made of named entities with various trust relations between each other. Entities are organized into trust zones. Each trust zone contains the entities under the same administrative control. This work-in-progress explores an approach to establishing trust relations between trust zones.},

keywords = {Security, trust management},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{tianyuan-yu2021enabling,

title = {Enabling Plug-n-Play in Named Data Networking},

author = {Tianyuan Yu and Philipp Moll and Zhiyi Zhang and Alexander Afanasyev and Lixia Zhang},

url = {https://named-data.net/wp-content/uploads/2022/03/Enabling_Plug-n-Play_in_Named_Data_Networking.pdf},

year  = {2021},

date = {2021-11-01},

urldate = {2021-11-01},

booktitle = {Proc. of IEEE Military Communications Conference (MILCOM)},

keywords = {Applications, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhiyi-zhang2021investigating,

title = {Investigating the Design Space for Name Confidentiality in Named Data Networking},

author = {Zhiyi Zhang and Su Yong Won and Lixia Zhang},

url = {https://named-data.net/wp-content/uploads/2022/03/Investigating_the_Design_Space_for_Name_Confidentiality_in_Named_Data_Networking.pdf},

year  = {2021},

date = {2021-11-01},

urldate = {2021-11-01},

booktitle = {Proc. of IEEE Military Communications Conference (MILCOM)},

keywords = {Applications, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhiyi-zhang2021ndn-mps:,

title = {NDN-MPS: Supporting Multiparty Authentication over Named Data Networking},

author = {Zhiyi Zhang and Siqi Liu and Randy King and Lixia Zhang},

url = {https://named-data.net/wp-content/uploads/2022/03/3460417.3482971.pdf},

year  = {2021},

date = {2021-09-01},

urldate = {2021-09-01},

booktitle = {Proc. of ACM Information Centric Networking (ICN)},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{siqi-liu2021poster:,

title = {Poster: Mnemosyne: An Immutable Distributed Logging Framework over Named Data Networking},

author = {Siqi Liu and Philipp Moll and Lixia Zhang},

url = {https://named-data.net/wp-content/uploads/2022/03/3460417.3483375.pdf},

year  = {2021},

date = {2021-09-01},

urldate = {2021-09-01},

booktitle = {Proc. of ACM Information Centric Networking (ICN)},

keywords = {Applications, Poster, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kaushi2020certcoalesce,

title = {CertCoalesce: Efficient Certificate Pool for NDN-Based Systems},

author = {Sanjeev Kaushik Ramani and Alexander Afanasyev},

url = {https://named-data.net/publications/certcoalesce-efficient-certificate-pool-for-ndn-based-systems/},

year  = {2020},

date = {2020-09-01},

booktitle = {In Proc. of ACM Conference on Information Centric Networking},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kaushi2020rapid,

title = {Rapid Establishment of Transient Trust for NDN-Based Vehicular Networks},

author = {Sanjeev Kaushik Ramani and Alex Afanasyev},

url = {https://named-data.net/publications/ramani2020rapid-establish/},

year  = {2020},

date = {2020-06-01},

booktitle = {In Proc. of IEEE ICC ICN-SRA Workshop},

keywords = {Security, Vehicular Networking},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kaushi2020ndnviber,

title = {NDNViber: Vibration-Assisted Automated Bootstrapping of IoT Devices},

author = {Sanjeev Kaushik Ramani and Proyash Podder and Alex Afanasyev},

url = {https://named-data.net/publications/ramani2020ndnviber/},

year  = {2020},

date = {2020-06-01},

booktitle = {In Proc. of IEEE ICC ICN-SRA Workshop},

keywords = {IoT, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kaushi2019ndn-abs,

title = {NDN-ABS: Attribute-Based Signature Scheme for Named Data Networking},

author = {Sanjeev Kaushik Ramani and Reza Tourani and George Torres and Satyajayant Misra and Alexander Afanasyev},

url = {https://named-data.net/publications/ndnabs/},

year  = {2019},

date = {2019-09-01},

booktitle = {Proceedings of ACM Conference on Information Centric Networking},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gawande2019decentralized,

title = {Decentralized and Secure Multimedia Sharing Application over Named Data Networking},

author = {Ashlesh Gawande and Jeremy Clark and Damian Coomes and Lan Wang},

url = {https://named-data.net/publications/npchat/},

year  = {2019},

date = {2019-09-01},

booktitle = {Proceedings of ACM Conference on Information Centric Networking},

keywords = {Applications, Multimedia, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhang2019proof,

title = {Proof of Authentication for Private Distributed Ledger},

author = {Zhiyi Zhang and Vishrant Vasavada and Randy King and Lixia Zhang},

url = {https://named-data.net/publications/zhang2019proof/},

year  = {2019},

date = {2019-01-01},

booktitle = {Proceedings of the NDSS Workshop on Decentralized IoT Systems and Security (DISS)},

keywords = {Applications, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhang2018nac,

title = {NAC: Automating Access Control via Named Data},

author = {Zhiyi Zhang and Yingdi Yu and Sanjeev Kaushik Ramani and Alex Afanasyev and Lixia Zhang},

url = {https://named-data.net/publications/zhang2018nac/},

year  = {2018},

date = {2018-10-01},

booktitle = {Military Communications for 21st Century (MILCOM 2018)},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{refaei2018enabling,

title = {Enabling a Data-Centric Battlefield Through Information Access Gateways},

author = {Tamer Refaei and Alex Afanasyev},

url = {https://named-data.net/publications/data-centric-battlefield/},

year  = {2018},

date = {2018-10-01},

booktitle = {Military Communications for 21st Century (MILCOM 2018)},

keywords = {Applications, Security, Sync},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{a2018supporting,

title = {Supporting Virtual Organizations Using Attribute-Based Encryption in Named Data Networking},

author = {Craig A. Lee and Zhiyi Zhang and Yukai Tu and Alex Afanasyev and Lixia Zhang},

url = {https://named-data.net/publications/1810ieeecic-vo/},

year  = {2018},

date = {2018-10-01},

booktitle = {Proc. of IEEE International Conference on Collaboration and Internet Computing},

keywords = {Applications, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{p2018secure,

title = {Secure Bootstrapping and Access Control in NDN-based Smart Home Systems},

author = {Lei Pi and Lan Wang},

url = {https://named-data.net/publications/tccc-infocom18/},

year  = {2018},

date = {2018-04-01},

booktitle = {in Proceedings of IEEE INFOCOM 2018 and poster},

keywords = {IoT, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu2017ndn,

title = {NDN DeLorean: An Authentication System for Data Archives in Named Data Networking,},

author = {Yingdi Yu and Alexander Afanasyev and Jan Seedorf and Zhiyi Zhang and Lixia Zhang},

url = {https://named-data.net/publications/yu2017ndn-delorean/},

year  = {2017},

date = {2017-09-01},

booktitle = {In Proceedings of the 4th ACM Conference on Information-Centric Networking (ACM ICN)},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shang2017breaking,

title = {Breaking out of the cloud: Local trust management and rendezvous in Named Data Networking of Things},

author = {Wentao Shang and Zhehao Wang and Alexander Afanasyev and Jeff Burke and Lixia Zhang},

url = {https://named-data.net/publications/ndn-breaking-out-of-cloud-iotdi-2017/},

year  = {2017},

date = {2017-04-01},

booktitle = {ACM/IEEE International Conference on Internet-of-Things Design and Implementation (IoTDI)},

keywords = {IoT, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chowdhury2017secure,

title = {Secure Information Sharing among Autonomous Vehicles},

author = {Muktadir Chowdhury and Ashlesh Gawande and Lan Wang},

url = {http://web0.cs.memphis.edu/~lanwang/paper/iotdi17.pdf},

year  = {2017},

date = {2017-04-01},

booktitle = {ACM/IEEE International Conference on Internet-of-Things Design and Implementation (IoTDI)},

keywords = {Security, Vehicular Networking},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shilton2016anticipating,

title = {Anticipating Policy and Social Implications of Named Data Networking},

author = {Katie Shilton and Jeffrey Burke and claffy and Lixia Zhang},

url = {https://named-data.net/publications/anticipating_policy_social_implications_ndn/},

year  = {2016},

date = {2016-12-01},

booktitle = {Communications of the ACM},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{afanasyev2016content-based,

title = {Content-Based Security for the Web},

author = {Alexander Afanasyev and J. Alex Halderman and Scott Ruoti and Kent Seamons and Yingdi Yu and Daniel Zappala and Lixia Zhang},

url = {https://named-data.net/publications/content-based-security-web/},

year  = {2016},

date = {2016-09-01},

booktitle = {ACM New Security Paradigms Workshop (NSPW)},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhang2016sharing,

title = {Sharing mHealth Data via Named Data Networking},

author = {Haitao Zhang and Zhehao Wang and Jeff Burke and Lixia Zhang},

url = {https://named-data.net/publications/sharing_mhealth_data_ndn/},

year  = {2016},

date = {2016-09-01},

booktitle = {ACM Information Centric Networking Conference},

keywords = {Applications, mHealth, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{dibenedett2016mitigating,

title = {Mitigating Poisoned Content with Forwarding Strategy},

author = {Stephanie DiBenedetto and Christos Papadopoulos},

url = {https://named-data.net/publications/mitigating_poisoned_content/},

year  = {2016},

date = {2016-04-01},

booktitle = {Workshop on Name-Oriented Mobility: Architecture and Algorithms and Applications (NOM)},

keywords = {caching, Forwarding Strategy, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu2009trust-schema,

title = {Schematizing Trust in Named Data Networking},

author = {Yingdi Yu and Alexander Afanasyev and David Clark and claffy and Van Jacobson and Lixia Zhang},

url = {https://named-data.net/publications/schematizing_trust_ndn/},

year  = {2015},

date = {2015-01-01},

booktitle = {Proc. of ACM Conference on Information-Centric Networking (ICN)},

note = {Obsoletes: TR NDN-0030},

keywords = {Schema, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shang2014securing,

title = {Securing Building Management Systems Using Named Data Networking},

author = {Wentao Shang and Qiuhan Ding and Alessandro Marianantoni and Jeff Burke and Lixia Zhang},

url = {https://named-data.net/publications/securing_building_management_ndn/},

year  = {2014},

date = {2014-01-01},

booktitle = {IEEE Network and vol. 28 and no. 3 and pp. 50-56},

keywords = {Applications, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{compagno2013poseidon,

title = {Poseidon: Mitigating Interest Flooding DDoS Attacks in Named Data Networking},

author = {Alberto Compagno and Mauro Conti and Paolo Gasti and Gene Tsudik},

url = {https://named-data.net/publications/ndn-ddos/},

year  = {2013},

date = {2013-01-01},

booktitle = {38th Annual IEEE Conference on Local Computer Networks (LCN 2013)},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{perez2013security,

title = {Security Evaluation of a Control System Using Named Data Networking},

author = {Victor Perez and Mevlut Turker Garip and Silas Lam and Lixia Zhang},

url = {https://named-data.net/publications/lighting-security-evaluation/},

year  = {2013},

date = {2013-10-01},

booktitle = {Eighth Workshop on Secure Network Protocols (NPSec)},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{acs2013cache,

title = {Cache Privacy in Named Data Networking},

author = {Gergely Acs and Mauro Conti and Paolo Gasti and Cesar Ghali and Gene Tsudik},

url = {https://named-data.net/publications/cache_privacy-icdcs13/},

year  = {2013},

date = {2013-07-01},

booktitle = {International Conference on Distributed Computing Systems (ICDCS 2013)},

keywords = {caching, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gasti2013dos,

title = {DoS and DDoS in Named Data Networking},

author = {Paolo Gasti and Gene Tsudik and Ersin Uzun and Lixia Zhang},

url = {https://named-data.net/publications/2013icccn-dos/},

year  = {2013},

date = {2013-01-01},

booktitle = {Proceedings of ICCCN 2013},

keywords = {naming, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{afanasyev2013interest,

title = {Interest Flooding Attack and Countermeasures in Named Data Networking},

author = {Alexander Afanasyev and Priya Mahadevan and Ilya Moiseenko and Ersin Uzun and Lixia Zhang},

url = {https://named-data.net/publications/ifip-interest-flooding-ndn/},

year  = {2013},

date = {2013-01-01},

booktitle = {Proceedings of IFI},

keywords = {Forwarding Strategy, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{burke2013securing,

title = {Securing Instrumented Environments over Content-Centric Networking: the Case of Lighting Control},

author = {Jeff Burke and Paolo Gasti Gasti and Naveen Nathan and Gene Tsudik},

url = {https://named-data.net/publications/nomen13/},

year  = {2013},

date = {2013-04-01},

booktitle = {Proceedings of IEEE INFOCOMM 2013 NOMEN Workshop},

keywords = {Applications, Security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{dibenedetto2012andana,

title = {ANDaNA: Anonymous Named Data Networking Application},

author = {S. DiBenedetto and P. Gasti and G. Tsudik and E. Uzun},

url = {https://named-data.net/publications/andana/},

year  = {2012},

date = {2012-02-01},

booktitle = {19th Annual Network and Distributed System Security Symposium},

keywords = {Security},

pubstate = {published},

tppubtype = {inproceedings}

}