Abstract:With the rapid development of the Internet, increasingly more attention has been paid to network security problems. A network security defense technology has become a very important research field. Currently, most network equipment transmits data in plaintext at the data link layer, which exposes important information, such as IP addresses, port numbers, and application protocols, to an attacker and provides an opportunity for network attacks. To protect a network against attacks and ensure its security, this paper proposes a mimic encryption system for network security. Based on the concepts of moving target defense and mimic security defense, using the principles of randomization, dynamism, and diversification, a data link layer mimic encryption system is constructed from the underlying network of an information system. By transforming the frame format, a reconfigurable encryption algorithm, an hash algorithm, and a pseudo-random number generator are used to design different combination encryption modes. Then, the hash value of an encrypted frame is obtained by performing the hash operation, and feedback update is performed to generate new key parameters for the hash key pool. In addition, the pseudo-random selection of combinations of encryption algorithms and keys is performed to achieve "one frame-one key''. Finally, an FPGA is used as the network encryption card, and a CPU is used to realize two-party key agreement and the upper layer application. Using the FPGA + CPU hardware and software collaboration, the attack surface is expanded. Taking advantage of the high anti-interference property of an FPGA, part of the attack against the software system is filtered. The experimental results and analysis show that the encryption and decryption performance of this system in a 10 G network are approximately 500 MB/s. Thus, the system can effectively prevent the leakage of user data and resist network sniffing, vulnerability attacks, exhaustive key search attacks, and ciphertext-only attacks. Moreover, this system provides high security.

Research on Application of Embedded Safe Network Card in Network Sniffing

RESEARCH INTO THE NETWORK SECURITY TECHNOLOGY OF ELECTRONIC TAXATION SYSTEM ON INTERNET

Intrusion Detection And Simulation For High-Speed Networks

The Application of the RSA Encryption Algorithm in Network Sniffing

Design and Implementation of Network Worm Detection System for Internal Network

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Network Safeguard System Based on IDXP

Design and Implementation of Information Detection System Based on Privacy Sensitive Data

Research on the Application of Data Encryption Technology in Communication Security.

Design and Implementation of LAN Data Security System Based on Trusted Network Connection

Know Yourself As Well As the Enemy and You Can Fight a Hundred Battles with No Danger of Defeat--A Study of Network Sniffing Technology and Its Precautionary Measures

Security analysis of data transporting in database application system with sniffer

Research on the Application of Data Encryption Technology in Computer Network Communication Security

Research on Vehicle Network Intrusion Detection Technology Based on Dynamic Data Set

Key Resource Forensics-Based Network Surveillance System Design And Implementation

Computer Network Security Technology Research

A Dynamic Feature-Based Security Detector In Wireless Sensor Network Transceiver

Mimic Encryption System for Network Security.

Research on Network Security of Campus Network

Methodology of Network Intrusion Detection System Penetration Testing.