Abstract:With the rapid development of the Internet, increasingly more attention has been paid to network security problems. A network security defense technology has become a very important research field. Currently, most network equipment transmits data in plaintext at the data link layer, which exposes important information, such as IP addresses, port numbers, and application protocols, to an attacker and provides an opportunity for network attacks. To protect a network against attacks and ensure its security, this paper proposes a mimic encryption system for network security. Based on the concepts of moving target defense and mimic security defense, using the principles of randomization, dynamism, and diversification, a data link layer mimic encryption system is constructed from the underlying network of an information system. By transforming the frame format, a reconfigurable encryption algorithm, an hash algorithm, and a pseudo-random number generator are used to design different combination encryption modes. Then, the hash value of an encrypted frame is obtained by performing the hash operation, and feedback update is performed to generate new key parameters for the hash key pool. In addition, the pseudo-random selection of combinations of encryption algorithms and keys is performed to achieve "one frame-one key''. Finally, an FPGA is used as the network encryption card, and a CPU is used to realize two-party key agreement and the upper layer application. Using the FPGA + CPU hardware and software collaboration, the attack surface is expanded. Taking advantage of the high anti-interference property of an FPGA, part of the attack against the software system is filtered. The experimental results and analysis show that the encryption and decryption performance of this system in a 10 G network are approximately 500 MB/s. Thus, the system can effectively prevent the leakage of user data and resist network sniffing, vulnerability attacks, exhaustive key search attacks, and ciphertext-only attacks. Moreover, this system provides high security.

Testing and Evaluation of the Mimic Defense Principle Verification System

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Research on Executive Control Strategy of Mimic Web Defense Gateway

Design and Implementation of Mimic Defense Web Server

Mimic Defense: a Designed-in Cybersecurity Defense Framework.

A Review of the Basic Theory of Mimic Defense

Research on Cyber Mimic Defense

A Framework for Mimic Defense System in Cyberspace

Condition Monitoring System of Simulator Test Rig for Shield Tunnelling Machine

Engineering and Implementation of Mimic Defense

Research on Cyberspace Mimic Defense Based on Dynamic Heterogeneous Redundancy Mechanism

Mimic Defense Technology

Foundation and Cost of Mimic Defense

Meaning and Vision of Mimic Computing and Mimic Security Defense

Demo Abstract: A HIL Emulator-Based Cyber Security Testbed for DC Microgrids

Research on Application of Mimic Defense in Industrial Control System Security

An Input-Aware Mimic Defense Theory and its Practice

MimicCloudSim: an Environment for Modeling and Simulation of Mimic Cloud Service

Anti-Attacking Modeling and Analysis of Cyberspace Mimic DNS

Mimic Encryption System for Network Security.

Securing Nuclear Power ICS with Mimic Defense Object Storage System