Archives for security

NDN Project Monthly Newsletter for November 2014

The Named Data Networking (NDN) project team compiles and publishes this newletter monthly to inform the community about recent project activities, meetings, publications, code releases, and upcoming events. You can find these newsletters on the Named Data Networking Project website at

1. Our recent annual report covers Named Data Net activities in 2013-14. The report summarizes highlights from our research spanning applications, routing, scalable forwarding, security and fundamental theory. It includes updates on forwarding daemon development and testbed deployment, and covers outreach activities such as education initiatives, our first NDN Community Workshop, the first ACM ICN conference, the NDN Consortium, and more. Please see for the report in its entirety.

Read More

NDNcomm 2014: 1st NDN community meeting

We are pleased to announce the first NDNcomm meeting, hosted by UCLA on September 4-5, 2014. This two-day meeting, the first in a series of meetings, will provide an opportunity to discuss existing capabilities and potential opportunities for the NDN software platform to serve the scientific research community.

Our goals for this meeting are (to be refined based on community input):

  1. elaborate on the current state of the NDN software platform and supporting libraries and applications
  2. describe state of current operational NDN testbed, and how to participate
  3. showcase external research using the NDN software platform and testbed
  4. debate existing and proposed functionality to support security and privacy at different layers of the architecture
  5. share examples of educational use of NDN, including tutorial material
  6. provide a forum to guide the evolution of the NDN architecture, key implementation artifacts including APIs, and to provide feedback proposing potential changes based on implementation and deployment experience
  7. discuss a vision/roadmap for the community interested in advancing NDN deployment and usability, and how to accelerate deployment, both from research and commercial perspectives
  8. provide an opportunity for interested members of the community to engage in hands-on-training to use NDN software or testbed platforms

If you think you are interested in participating, see the NDNcomm 2014 page for more details and registration.

Named Data Networking Next Phase (NDN-NP)

We are pleased to note that the National Science Foundation’s (NSF) Directorate for Computer and Information Science and Engineering (CISE) just announced its support for the next phase of the Future Internet Architecture projects (“Moving towards a more robust, secure and agile Internet”). This next round of funding will allow the NDN-NP Project to further develop, test and deploy our novel Internet architecture.

Below is the project summary we submitted with our proposal on 7 June 2013:

Project Summary

Named Data Networking (NDN) is a Future Internet Architecture inspired by years of empirical research into network usage and a growing awareness of persistently unsolved problems of the current Internet (IP) architecture. Its central premise is that the Internet is primarily used as an information distribution network, a use that is not a good match for IP, and that the future Internet’s “thin waist” should be based on named data rather than numerically addressed hosts.

This project continues research on NDN started in 2010 under NSF’s FIA program. It applies the project team’s increasingly sophisticated understanding of NDN’s opportunities and challenges to two national priorities–Health IT and Cyberphysical Systems–to further the evolution of the architecture in the experimental, application-driven manner that proved successful in the first three years. In particular, our research agenda is organized to translate important results in architecture and security into library code that guides development for these environments and other key applications toward native NDN designs. It simultaneously continues fundamental research into the challenges of global scalability and broad opportunities for architectural innovation opened up by “simply” routing and forwarding data based on names.

Our research agenda includes: (1) Application design, exploring naming and application design patterns, support for rendezvous, discovery and bootstrapping, the role and design of in-network storage, and use of new data synchronization primitives; (2) Security and trustworthiness, providing basic building blocks of key management, trust management, and encryption-based access control for the new network, as well as anticipating and mitigating future security challenges faced in broad deployment; (3) Routing and forwarding strategy, developing and evaluating path-vector, link-state, and hyperbolic options for inter-domain routing, creating overall approaches to routing security and trust, as well as designing flexible forwarding and mobility support; (4) Scalable forwarding, aiming to support real-world deployment, evaluation and adoption via an operational, scalable forwarding platform; (5) Library and tool development, developing reference implementations for client APIs, trust and security, and new network primitives based on the team’s fundamental results, as well as supporting internal prototype development and external community efforts; (6) Social and economic impacts, considering the specific questions faced in our network environments as well as broader questions that arise in considering a “World on NDN.”

We choose Mobile Health and Enterprise Building Automation and Management Systems as specific instances of Health IT and Cyberphysical Systems to validate the architecture as well as drive new research. Domain experts for the former will be the Open mHealth team, a non-profit patient-centric ecosystem for mHealth, led by Deborah Estrin (Cornell) and Ida Sim (UCSF). For the latter, our experts will be UCLA Facilities Management, operators of the second largest Siemens building monitoring system on the West Coast. To guide our research on the security dimensions of these important environments and the NDN architecture more generally, we have convened a Security Advisory Council (NDN-SAC) to complement our own security and trust effort.

Intellectual Merit

The NDN architecture builds on lessons learned from the success of the IP architecture, preserving principles of the thin waist, hierarchical names, and the end-to-end principle. The design reflects a recognition of the major shift in the applications communication model: from the “where” (i.e., the host/location) to the “what” (i.e., the content). Architecting a communications infrastructure around this shift can radically simplify application designs to allow applications to communicate directly using the name of the content they desire and leave to the network to figure out how and where to retrieve it. NDN also recognizes that the biggest weakness in the current Internet architecture is lack of security, and incorporates a fundamental building block to improve security by requiring that all content be cryptographically signed.

Broader Impacts

The success of new architectures requires broad community involvement and uptake. NDN has built significant momentum through commitment to an open source model that has spurred substantial research activity in both architecture and current implementation. Project members are often invited to present at “future Internet” meetings around the world, and we have performed two high-visibility demos of NDN’s ability to handle large scale distribution. Industry is also showing increasing interest in NDN. Finally, NDN has also had a significant impact on our students, yielding several current Ph.D. theses on NDN topics, industry internships involving NDN research, and graduate and undergraduate curriculum material that offer a comprehensive alternative to IP to stimulate discussion of what network architecture design really means.

What is NDN?

The Named Data Networking (NDN) project aims to develop a new Internet architecture that can capitalize on strengths — and address weaknesses — of the Internet’s current host-based, point-to-point communication architecture in order to naturally accommodate emerging patterns of communication. The project studies the technical challenges that must be addressed to validate NDN as a future Internet architecture: routing scalability, fast forwarding, trust models, network security, content protection and privacy, and fundamental communication theory. The project uses end-to-end testbed deployments, simulation, and theoretical analysis to evaluate the proposed architecture, and is developing specifications and prototype implementations of NDN protocols and applications. NDN Technical Report NDN-0001 Named Data Networking (NDN) Project is a slightly modified version of the NDN project proposal. The NDN project was funded by NSF in September 2010 as one of the four projects under NSF’s Future Internet Architecture Program.