Abstract:With the rapid development of the Internet, increasingly more attention has been paid to network security problems. A network security defense technology has become a very important research field. Currently, most network equipment transmits data in plaintext at the data link layer, which exposes important information, such as IP addresses, port numbers, and application protocols, to an attacker and provides an opportunity for network attacks. To protect a network against attacks and ensure its security, this paper proposes a mimic encryption system for network security. Based on the concepts of moving target defense and mimic security defense, using the principles of randomization, dynamism, and diversification, a data link layer mimic encryption system is constructed from the underlying network of an information system. By transforming the frame format, a reconfigurable encryption algorithm, an hash algorithm, and a pseudo-random number generator are used to design different combination encryption modes. Then, the hash value of an encrypted frame is obtained by performing the hash operation, and feedback update is performed to generate new key parameters for the hash key pool. In addition, the pseudo-random selection of combinations of encryption algorithms and keys is performed to achieve "one frame-one key''. Finally, an FPGA is used as the network encryption card, and a CPU is used to realize two-party key agreement and the upper layer application. Using the FPGA + CPU hardware and software collaboration, the attack surface is expanded. Taking advantage of the high anti-interference property of an FPGA, part of the attack against the software system is filtered. The experimental results and analysis show that the encryption and decryption performance of this system in a 10 G network are approximately 500 MB/s. Thus, the system can effectively prevent the leakage of user data and resist network sniffing, vulnerability attacks, exhaustive key search attacks, and ciphertext-only attacks. Moreover, this system provides high security.

Data Encryption System Based on Double FPGA and MEMS Stronglink

High-Speed Implementation of the SMS4 Algorithm Engine

Implementation of SMS4 block cipher on FPGA

Implementation and Simulation of AES Encryption Algorithm based on FPGA

An implementation of AES algorithm Based on FPGA.

A High Performance Encryption System Based on AES Algorithm with Novel Hardware Implementation

Design and implementation of high speed encryption and decryption system based on PCIE bus

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

Mimic Encryption System for Network Security.

Design of Data Encryption in Reconfigurable System

Hardware Implementation of Encryption Algorithm Using USB and FPGA

Fast Low Level Disk Encryption Using FPGAs

FPGA Implementations for Data Encryption and Decryption via Concurrent and Parallel Computation: A Review

Encryption scheme design and implementation of embedded processor off-chip memory access

The Design and Implementation of a Block Cipher ASIC

Computer Software′s Hardware Encryption Card

Design of an Encryption-Decryption Module Oriented for Internet Information Security SOC Design

A New IP Protection Method with High Safety

VLSI Implementation of AES Algorithm Against Differential Power Attack and Differential Fault Attack

Security Memory System for Mobile Device or Computer Against Memory Attacks

Design and Implementation of AES Algorithm Based on FPGA