System architectural design of a hardware engine for moving target IPv6 defense over IEEE 802.3 Ethernet
No Thumbnail Available
Authors
Sagisi, Joseph
Tront, Joseph
Marchany, Randolph C.
Issue Date
2017-10
Type
proceedings-article
Language
Keywords
Hardware , Protocols , Logic gates , Engines , Clocks , Encapsulation , IP networks
Alternative Title
Abstract
The Department of Homeland Security Cyber Security Division (CSD) chose Moving Target Defense as one of the fourteen primary Technical Topic Areas pertinent to securing federal networks and the larger Internet. Moving Target Defense over IPv6 (MT6D) employs an obscuration technique offering keyed access to hosts at a network level without altering existing network infrastructure. This is accomplished through cryptographic dynamic addressing, whereby a new network address is bound to an interface every few seconds in a coordinated manner. The goal of this research is to produce a Register Transfer Level (RTL) network security processor implementation to enable the production of an Application Specific Integrated Circuit (ASIC) variant of MT6D processor for wide deployment. RTL development is challenging in that it must provide system level functions that are normally provided by the Operating System's kernel and supported libraries. This paper presents the architectural design of a hardware engine for MT6D (HE-MT6D) and is complete in simulation. Unique contributions are an inline stream-based network packet processor with a Complex Instruction Set Computer (CISC) architecture, Network Time Protocol listener, and theoretical increased performance over previous software implementations.
Description
Citation
J. Sagisi, J. Tront and R. Marchany, "System architectural design of a hardware engine for moving target IPv6 defense over IEEE 802.3 Ethernet," MILCOM 2017 - 2017 IEEE Military Communications Conference (MILCOM), Baltimore, MD, USA, 2017, pp. 551-556, doi: 10.1109/MILCOM.2017.8170846.
Publisher
IEEE