基于片上网络的安全路由器研究与设计  

Research and design of security router based on network-on-chip

作　　者：陈松涛 徐金甫[1] 张立朝[1] 李军伟[1] 

机构地区：[1]信息工程大学密码工程学院,河南郑州450001

出　　处：《计算机工程与设计》2018年第3期890-894,共5页Computer Engineering and Design

摘　　要：为保证片上网络的服务质量,设计抵抗拒绝服务攻击的安全路由器。建立攻击树模型,分析和总结造成片上网络拒绝服务的攻击方式,分别是无效地址攻击、带宽占用攻击和路由表恶意修改攻击。在路由器内嵌入安全模块,使之能够过滤数据包源节点地址和目标节点地址,调节数据包注入网络的速率,监视路由器各输出端口的流量。仿真和综合结果表明,安全路由器可以有效阻止和检测拒绝服务攻击,安全模块综合后的面积仅占整个安全路由器面积的8.9%。To guarantee the QoS of the NoC,a security router was designed to resist denial of service attacks.The attack tree model was established to analyze and summarize the attacks,namely,invalid address attack,bandwidth occupancy attack and routing table malicious modification attack.The security module was embedded in the router so that it filtered the packet source node address and destination node address,regulated the rate of packet injection into the network,and monitored the traffic of each output port of the router.Simulation and synthesis results show that the security router can effectively prevent and detect denial of service attacks,and synthesis area of the security module accounts for only 8.9% of the total area of the security router.

关 键 词：片上系统 片上网络 拒绝服务 安全路由器 地址过滤 流量调节 端口监视 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]