Abstract:With the rapid development of the Internet, increasingly more attention has been paid to network security problems. A network security defense technology has become a very important research field. Currently, most network equipment transmits data in plaintext at the data link layer, which exposes important information, such as IP addresses, port numbers, and application protocols, to an attacker and provides an opportunity for network attacks. To protect a network against attacks and ensure its security, this paper proposes a mimic encryption system for network security. Based on the concepts of moving target defense and mimic security defense, using the principles of randomization, dynamism, and diversification, a data link layer mimic encryption system is constructed from the underlying network of an information system. By transforming the frame format, a reconfigurable encryption algorithm, an hash algorithm, and a pseudo-random number generator are used to design different combination encryption modes. Then, the hash value of an encrypted frame is obtained by performing the hash operation, and feedback update is performed to generate new key parameters for the hash key pool. In addition, the pseudo-random selection of combinations of encryption algorithms and keys is performed to achieve "one frame-one key''. Finally, an FPGA is used as the network encryption card, and a CPU is used to realize two-party key agreement and the upper layer application. Using the FPGA + CPU hardware and software collaboration, the attack surface is expanded. Taking advantage of the high anti-interference property of an FPGA, part of the attack against the software system is filtered. The experimental results and analysis show that the encryption and decryption performance of this system in a 10 G network are approximately 500 MB/s. Thus, the system can effectively prevent the leakage of user data and resist network sniffing, vulnerability attacks, exhaustive key search attacks, and ciphertext-only attacks. Moreover, this system provides high security.

Securing Nuclear Power ICS with Mimic Defense Object Storage System

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

On Distributed Object Storage Architecture Based on Mimic Defense

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Mimic Defense: a Designed-in Cybersecurity Defense Framework.

Foundation and Cost of Mimic Defense

The Architecture of Distributed Storage System under Mimic Defense Theory.

Research on Cyber Mimic Defense

A Framework for Mimic Defense System in Cyberspace

An operation verification strategy against network attack of dcs in nuclear power plant

MDFS: A Mimic Defense Theory Based Architecture for Distributed File System

Meaning and Vision of Mimic Computing and Mimic Security Defense

An Input-Aware Mimic Defense Theory and its Practice

Mimic Encryption System for Network Security.

Design and Implementation of Mimic Defense Web Server

Key-area Cyberspace Mimic Defense Against Data-Oriented Attacks

Research on Key Technology of Industrial Network Boundary Protection based on Endogenous Security

Mimic Defense Technology

Original Meaning and Vision of Mimic Defense