E02-CX: Yes
Rationale
Goergen, Cholez, Francois and Engel (University of Luxembourg), Security Monitoring for Content-Centric Networking (2013), publish an external security assessment of CCNx pending-Interest state. Sections 2.3 and 4 describe resource-exhaustion threats and a controlled ccnd experiment. This is a protocol/state-handling assessment, not merely analysis of a signature primitive. The selected CCNx 1.0 still retains pending Interests and reverse-path state: RFC 8569 sections 2.4 and 10.3.4 explicitly describe PIT lifetime and insufficient-resource handling. E02 is Yes for published analysis of this retained critical mechanism.
Assessment method
Primary published external security assessment mapped to a retained critical mechanism; no execution
Source context
Goergen et al., Security Monitoring for Content-Centric Networking, HAL-00785254 v1, sections 2.3/4; RFC 8569 sections 1/2.4/10.3.4
Outstanding qualification
Historical CCNx 0.x experiment, not a CCNx 1.0 implementation audit. Exact-name matching and Interest Return differ in 1.0; no attack rate, detection score, vulnerable build or quantitative impact transfers to it. Consumer-validated ECDSA content does not remove the pending-Interest mechanism, but this paper does not audit the selected signature implementation. Authors are external to the RFC 8569 author team; declared affiliation is not a separate conflict investigation. Their proposed monitoring system is not added to the selected stack. No F15 or E04 verdict follows.
Public sources
- https://hal.science/hal-00785254/document
- https://doi.org/10.1007/978-3-642-35890-6_20
- https://orbilu.uni.lu/handle/10993/3830
- https://www.rfc-editor.org/rfc/rfc8569.html
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round441-sources.json
- round441.html