In this paper, we propose a novel FPGA-based high-speed DDoS countermeasure system that can flexibly adapt to DDoS attacks while still maintaining system performance. The system includes a packet decoder module and multiple DDoS countermeasure mechanisms. We apply dynamic partial reconfiguration technique in this system so that the countermeasure mechanisms can be flexibly changed or updated on-the-fly. The proposed system architecture separates DDoS protection modules (which implement DDoS countermeasure techniques) from the packet decoder module. By using this approach, one DDoS protection module can be reconfigured without interfering with other modules. The proposed system is implemented on a NetFPGA 10G board. The synthesis results show that the system can work at up to 116.782 MHz while utilizing up to 39.9% Registers and 49.85% BlockRAM of the Xilinx Virtex xcv5tx240t FPGA device on the NetFPGA 10G board. The system achieves the detection rate of 100% with the false negative rate at 0% and false positive rate closed to 0.16%. The prototype system achieves packet decoding throughput at 9.869 Gbps in half-duplex mode and 19.738 Gbps in full-duplex mode.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    FPGA-Based Multiple DDoS Countermeasure Mechanisms System Using Partial Dynamic Reconfiguration


    Beteiligte:

    Erscheinungsdatum :

    2016-10-10


    Anmerkungen:

    doi:10.21553/rev-jec.137
    REV Journal on Electronics and Communications; Vol. 5, No. 3-4 (Jul-Dec, 2015) ; 1859-378X



    Medientyp :

    Aufsatz (Zeitschrift)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch


    Klassifikation :

    DDC:    629



    Runtime FPGA partial reconfiguration

    McDonald, Eric J. | IEEE | 2008


    A Novel High-Speed Architecture for Integrating Multiple DDoS Countermeasure Mechanisms Using Reconfigurable Hardware

    Nguyen-Hoang, Biet / Tran-Thanh, Binh / Pham-Quoc, Cuong et al. | BASE | 2017

    Freier Zugriff

    Runtime FPGA Partial Reconfiguration

    McDonald, E. J. | IEEE | 2008


    Runtime FPGA Partial Reconfiguration

    McDonald, E.J. | Online Contents | 2008