Hardware assisted security gateway system: combined with FPGA shielding protection

As cyberattacks on valuable digital assets increase in frequency and sophistication, traditional security gateways are becoming more vulnerable due to their reliance on complex software environments with unpatched vulnerabilities. To address this, we propose a hybrid security gateway that integrates FPGA-based hardware protection to filter out illegitimate traffic and shield the system from external attacks. Our architecture incorporates a novel security protocol based on the Noise Protocol Framework and modern cryptographic algorithms. By modularizing core encryption and filtering tasks and offloading them to independent FPGA components, we reduce the attack surface and enhance overall security. We implemented a prototype and conducted extensive security and usability tests, showing that our system matches the network throughput of traditional gateways while significantly improving resistance to cyber threats, without adding excessive latency.

Authors

Institutions

Publication Details

Published
2024-12-17
DOI
https://doi.org/10.1109/trustcom63139.2024.00039
Primary Topic
Cryptographic Implementations and Security
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Hardware assisted security gateway system: combined with FPGA shielding protection

Chenyang Tu, Yifei Zhang, Jihong Liu
Cryptographic Implementations and Security
article

Hardware assisted security gateway system: combined with FPGA shielding protection

Chenyang Tu, Yifei Zhang, Jihong Liu
article en

Abstract

As cyberattacks on valuable digital assets increase in frequency and sophistication, traditional security gateways are becoming more vulnerable due to their reliance on complex software environments with unpatched vulnerabilities. To address this, we propose a hybrid security gateway that integrates FPGA-based hardware protection to filter out illegitimate traffic and shield the system from external attacks. Our architecture incorporates a novel security protocol based on the Noise Protocol Framework and modern cryptographic algorithms. By modularizing core encryption and filtering tasks and offloading them to independent FPGA components, we reduce the attack surface and enhance overall security. We implemented a prototype and conducted extensive security and usability tests, showing that our system matches the network throughput of traditional gateways while significantly improving resistance to cyber threats, without adding excessive latency.

Chinese Academy of Sciences (CN), Institute of Information Engineering (CN)
Openalex Percentile: Top 74%
Cryptographic Implementations and Security
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.