Implementation of an FPGA-Based IP Reassembly Module

李鹏,刘斌
DOI: https://doi.org/10.3969/j.issn.1008-0570.2008.11.070
2008-01-01
Abstract:In order to secure the network, IP reassembly is needed on every IDS/IPS. Because the software-implementation could not run at a high speed, the processing of IP reassembly should be implemented in hardware. In this paper, we implemented an FPGA-based IP reassembly module. It solved the bottleneck problem that most IDS/IPS had met, and it also provided a mechanism to be aware of the attacks that had been launched by hackers using the vulnerability of IP fragmentation and reassembly. The design was verified on an Altera FPGA using QuatusII to synthesize and floor plan. It can achieve a throughput of 2.5Gb/s. And it is character-ized as low cost and high scalability.
What problem does this paper attempt to address?