FROG: A Packet Hop Count based DDoS Countermeasure in NDN

Yoshimichi Nakatsuka, Janaka L. Wijekoon, Hiroaki Nishi

Research output: Chapter in Book/Report/Conference proceedingConference contribution

5 Citations (Scopus)


Named Data Networking (NDN) is a promising inter-networking paradigm that focus on content rather than hosts and their physical locations. In NDN Consumers issue Interests for Contents. Producers generate a content in response to each received interest and such content is routed back to the requesting consumer. When compared to IP, NDN brings advantages such as better throughput and lower latency, because routers are able to cache popular contents and satisfy interests for such contents locally. However, before being considered a viable approach, NDN should offer security services that are ideally better, but at least equivalent to current mechanisms in IP.In this regard, mechanisms to prevent DDoS are of paramount importance. In this work we propose FROG: a simple yet effective Interest Flooding Attack (IFA) detection and mitigation method. FROG runs on routers that are directly connected to NDN consumers and monitors packet hop counts. It then calculates mean and variance using stored hop counts to distinguish attackers from legitimate users. We use the NDN simulator ndnSIM to evaluate FROG's effectiveness. Our results show that FROG improves resilience against DDoS attacks. In particular, during an attack, legitimate users can still receive 75% of requested contents. Without FROG this number decreases to 50%.

Original languageEnglish
Title of host publication2018 IEEE Symposium on Computers and Communications, ISCC 2018
PublisherInstitute of Electrical and Electronics Engineers Inc.
Number of pages6
ISBN (Electronic)9781538669501
Publication statusPublished - 2018 Nov 15
Event2018 IEEE Symposium on Computers and Communications, ISCC 2018 - Natal, Brazil
Duration: 2018 Jun 252018 Jun 28

Publication series

NameProceedings - IEEE Symposium on Computers and Communications
ISSN (Print)1530-1346


Other2018 IEEE Symposium on Computers and Communications, ISCC 2018


  • DDoS attack
  • Information-Centric Networking
  • Interest Flooding Attack
  • Named Data Networking
  • Packet Hop Count

ASJC Scopus subject areas

  • Software
  • Signal Processing
  • General Mathematics
  • Computer Science Applications
  • Computer Networks and Communications


Dive into the research topics of 'FROG: A Packet Hop Count based DDoS Countermeasure in NDN'. Together they form a unique fingerprint.

Cite this