Title :
A new method of hardware firewall implementation on SOC
Author :
Ezzati, Saeed ; Naji, Hamid Reaza ; Chegini, Amir ; HabibiMehr, Payam
Author_Institution :
Electr. & Comput. Eng. Dept., Univ. of Shahid Beheshti, Iran
Abstract :
A firewall´s complexity and processing time is known to increase with the size of its rule set. Empirical studies show that as the rule set grows larger, power consumption and delay time for processing IP Packets particularly on Hardware firewalls increases extremely, and, therefore the performance of the firewall decreases proportionally. This paper present a new FPGA (field programmable gate arrays) based firewall with high performance, high processing speed, low power consumption, and low space utilization in contrast with early submitted paper in some of credible international conferences. First of all, we use Embedded Memories of FPGA instead of external memories, to increase the processing speed and to decrease the mass of signaling and noise creation in connection between FPGA and external memories. Moreover, we have applied pipeline technique to the architecture, and so we achieved high processing speed in addition to low power consumption. Based on this model, only the security rules are updated by admin during the configuration process while other hardware part would remain unchanged. The proposed architecture is written in VHDL standard language and it is simulated and synthesized with ALTERA QUARTUS II software. Finally, for validation of proposed architecture, we implemented the synthesized code on 3 of ALTERA FPGAs families (STRATIX III, CYCLONE III, CYCLONE II), and then results have been compared with earlier results.
Keywords :
IP networks; authorisation; computer network security; field programmable gate arrays; hardware description languages; low-power electronics; system-on-chip; ALTERA QUARTUS II software; FPGA; IP packet; SOC; VHDL; configuration process; field programmable gate array; hardware firewall implementation; pipeline technique; power consumption; Fires; Hardware; Pipelines; Radiation detectors; Random access memory; Registers; Synchronization;
Conference_Titel :
Internet Technology and Secured Transactions (ICITST), 2010 International Conference for
Conference_Location :
London
Print_ISBN :
978-1-4244-8862-9
Electronic_ISBN :
978-0-9564263-6-9