Hardware assisted security gateway system: combined with FPGA shielding protection
As cyberattacks on valuable digital assets increase in frequency and sophistication, traditional security gateways are becoming more vulnerable due to their reliance on complex software environments with unpatched vulnerabilities. To address this, we propose a hybrid security gateway that integrates FPGA-based hardware protection to filter out illegitimate traffic and shield the system from external attacks. Our architecture incorporates a novel security protocol based on the Noise Protocol Framework and modern cryptographic algorithms. By modularizing core encryption and filtering tasks and offloading them to independent FPGA components, we reduce the attack surface and enhance overall security. We implemented a prototype and conducted extensive security and usability tests, showing that our system matches the network throughput of traditional gateways while significantly improving resistance to cyber threats, without adding excessive latency.
Authors
- Chenyang Tu (ORCID: https://orcid.org/0000-0003-2130-0531)
- Yifei Zhang (ORCID: https://orcid.org/0000-0002-5177-0465)
- Jihong Liu (ORCID: https://orcid.org/0000-0001-8685-3036)
Institutions
- Chinese Academy of Sciences (CN)
- Institute of Information Engineering (CN)
Publication Details
- Published
- 2024-12-17
- DOI
- https://doi.org/10.1109/trustcom63139.2024.00039
- Primary Topic
- Cryptographic Implementations and Security
- Type
- article
- Field-Weighted Citation Impact
- 0.00