1. A computer-implemented method, comprising: obtaining an interest, by a computing device from a requesting entity over a content centric network, wherein the interest includes a location-independent structured name associated with a request for data; obtaining the data associated with the location-independent structured name; obtaining a policy associated with the data's location-independent structured name or name prefix; determining a context for the interest; determining whether the requesting entity is within a protected space for the obtained data as determined based on the policy and the context, wherein the protected space includes at least an application which is not suspect of having been compromised by an illegitimate user or software, and wherein determining that the requesting entity is within the protected space involves determining that a recent behavior profile for the requesting entity, as determined based in part on the context, is substantially similar to a previous behavior profile for the requesting entity; and responsive to determining that the requesting entity is within the protected space, forwarding the data to the requesting entity over the content centric network.