Internet Cache Pollution Attacks and Countermeasures

Abstract— Proxy caching servers are widely deployed in today’s Internet. While cooperation among proxy caches can significantly improve a network’s resilience to denial-of-service (DoS) attacks, lack of cooperation can transform such servers into viable DoS targets. In this paper, we investigate a class of pollution attacks that aim to degrade a proxy’s caching capabilities, either by ruining the cache file locality, or by inducing false file locality. Using simulations, we propose and evaluate the effects of pollution attacks both in web and peer-topeer (p2p) scenarios, and reveal dramatic variability in resilience to pollution among several cache replacement policies. We develop efficient methods to detect both false-locality and locality-disruption attacks, as well as a combination of the two. To achieve high scalability for a large number of clients/requests without sacrificing the detection accuracy, we leverage streaming computation techniques, i.e., bloom filters. ...

• Type: Conference
• Year: 2006
• Where: ICNP
• Authors: Yan Gao, Leiwen Deng, Aleksandar Kuzmanovic, Yan Chen
• Keywords: ICNP 2006, Network Protocols, Pollution Attacks, Proxy Caching Servers, file Locality