Abstract:With the rapid development of the Internet, increasingly more attention has been paid to network security problems. A network security defense technology has become a very important research field. Currently, most network equipment transmits data in plaintext at the data link layer, which exposes important information, such as IP addresses, port numbers, and application protocols, to an attacker and provides an opportunity for network attacks. To protect a network against attacks and ensure its security, this paper proposes a mimic encryption system for network security. Based on the concepts of moving target defense and mimic security defense, using the principles of randomization, dynamism, and diversification, a data link layer mimic encryption system is constructed from the underlying network of an information system. By transforming the frame format, a reconfigurable encryption algorithm, an hash algorithm, and a pseudo-random number generator are used to design different combination encryption modes. Then, the hash value of an encrypted frame is obtained by performing the hash operation, and feedback update is performed to generate new key parameters for the hash key pool. In addition, the pseudo-random selection of combinations of encryption algorithms and keys is performed to achieve "one frame-one key''. Finally, an FPGA is used as the network encryption card, and a CPU is used to realize two-party key agreement and the upper layer application. Using the FPGA + CPU hardware and software collaboration, the attack surface is expanded. Taking advantage of the high anti-interference property of an FPGA, part of the attack against the software system is filtered. The experimental results and analysis show that the encryption and decryption performance of this system in a 10 G network are approximately 500 MB/s. Thus, the system can effectively prevent the leakage of user data and resist network sniffing, vulnerability attacks, exhaustive key search attacks, and ciphertext-only attacks. Moreover, this system provides high security.

Mimic Computing for Password Recovery

Cognitively Reconfigurable Mimic-Based Heterogeneous Password Recovery System

High-Performance Password Recovery Hardware Going From GPU to Hybrid CPU-FPGA Platform

A Hybrid-CPU-FPGA-based Solution to the Recovery of Sha256crypt-hashed Passwords

A design framework for processing-in-memory accelerator

PIM-DH: ReRAM-based processing-in-memory architecture for deep hashing acceleration

Optimized Password Recovery for Encrypted RAR on GPUs

Optimized Password Recovery Based on GPUs for SM3 Algorithm

GPU-Based High Performance Password Recovery Technique for Hash Functions

RUPA: A High Performance, Energy Efficient Accelerator for Rule-Based Password Generation in Heterogenous Password Recovery System

Decryption of Encrypted Key Password by Cloud Computing

Optimized Password Recovery for SHA-512 on GPUs

Decision Mechanism of Password Recovery Based on Bloom Filter in Heterogeneous Platform

A Heterogeneous RISC-V SoC for Confidential Computing and Password Recovery

Efficient Optimization of MS Office 2013+ Password Cracking and PBKDF2-HMAC-SHA2 on GPUs

Password Cracking Based on Rainbow Tables with A Dynamically Coarse Grain Reconfigurable Architecture.

Energy-Efficient RAR3 Password Recovery with Dual-Granularity Data Path Strategy.

Mimic Encryption System for Network Security.

Password Recovery for RAR Files Using CUDA

MT-office: Parallel Password Recovery Program for Office on Domestic Heterogeneous Multi-Core Processor

Recryptor: A Reconfigurable Cryptographic Cortex-M0 Processor with In-Memory and Near-Memory Computing for IoT Security