Platform agnostic, scalable, and unobtrusive FPGA network processor design of moving target defense over IPv6 (MT6D) over IEEE 802.3 Ethernet

dc.contributor.authorSagisi, Joseph
dc.contributor.authorTront, Joseph
dc.contributor.authorBradley, Randy Marchany
dc.date.accessioned2023-11-03T19:50:45Z
dc.date.available2023-11-03T19:50:45Z
dc.date.issued2017-05
dc.description.abstractThis work presents the proof of concept implementation for the first hardware-based design of Moving Target Defense over IPv6 (MT6D) in full Register Transfer Level (RTL) logic, with future sights on an embedded Application-Specified Integrated Circuit (ASIC) implementation. Contributions are an IEEE 802.3 Ethernet stream-based in-line network packet processor with a specialized Complex Instruction Set Computer (CISC) instruction set architecture, RTL-based Network Time Protocol v4 synchronization, and a modular crypto engine. Traditional static network addressing allows attackers the incredible advantage of taking time to plan and execute attacks against a network. To counter, MT6D provides a network host obfuscation technique that offers network-based keyed access to specific hosts without altering existing network infrastructure and is an excellent technique for protecting the Internet of Things, IPv6 over Low Power Wireless Personal Area Networks, and high value globally routable IPv6 interfaces. This is done by crypto-graphically altering IPv6 network addresses every few seconds in a synchronous manner at all endpoints. A border gateway device can be used to intercept select packets to unobtrusively perform this action. Software driven implementations have posed many challenges, namely, constant code maintenance to remain compliant with all library and kernel dependencies, the need for a host computing platform, and less than optimal throughput. This work seeks to overcome these challenges in a lightweight system to be developed for practical wide deployment.
dc.description.sponsorshipDepartment of Electrical Engineering and Computer Science
dc.identifier.citationJ. Sagisi, J. Tront and R. M. Bradley, "Platform agnostic, scalable, and unobtrusive FPGA network processor design of moving target defense over IPv6 (MT6D) over IEEE 802.3 Ethernet," 2017 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), Mclean, VA, USA, 2017, pp. 165-165, doi: 10.1109/HST.2017.7951829.
dc.identifier.doihttps://doi,org/10.1109/hst.2017.7951829
dc.identifier.urihttps://hdl.handle.net/20.500.14216/1138
dc.publisherIEEE
dc.relation.ispartof2017 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
dc.subjectField programmable gate arrays
dc.subjectIEEE 802.3 Standard
dc.subjectEPON
dc.subjectComputers
dc.subjectInstruction sets
dc.subjectCryptography
dc.subjectElectrical engineering
dc.titlePlatform agnostic, scalable, and unobtrusive FPGA network processor design of moving target defense over IPv6 (MT6D) over IEEE 802.3 Ethernet
dc.typeproceedings-article
local.peerReviewedYes

Files