What type of data or test environment did you use to evaluate your method?
We evaluated the method in an ns-3 simulation testbed extended to model NRS-based ICN with explicit name resolution and SDN-style control: a topology with 20 edge nodes, 10 cache nodes, and 2 producers, where 300 benign users generate Zipf-like requests and 200 attackers generate cache-pollution/forwarding-exhaustion traffic (high-entropy names, similar-name pollution, invalid identifiers, and dynamic short-lived names). We ran each simulation for 250 s with an attack window from 40 s to 200 s, using links of 10 Mb/s and 10 ms delay, LRU caches of 1000 Data packets, and a namespace of 10,000 objects.
