基于片上网络的安全路由器研究与设计

摘要

To guarantee the QoS of the NoC,a security router was designed to resist denial of service attacks.The attack tree model was established to analyze and summarize the attacks,namely,invalid address attack,bandwidth occupancy attack and routing table malicious modification attack.The security module was embedded in the router so that it filtered the packet source node address and destination node address,regulated the rate of packet injection into the network,and monitored the traffic of each output port of the router.Simulation and synthesis results show that the security router can effectively prevent and detect denial of service attacks,and synthesis area of the security module accounts for only 8.9％ of the total area of the security router.%为保证片上网络的服务质量,设计抵抗拒绝服务攻击的安全路由器.建立攻击树模型,分析和总结造成片上网络拒绝服务的攻击方式,分别是无效地址攻击、带宽占用攻击和路由表恶意修改攻击.在路由器内嵌入安全模块,使之能够过滤数据包源节点地址和目标节点地址,调节数据包注入网络的速率,监视路由器各输出端口的流量.仿真和综合结果表明,安全路由器可以有效阻止和检测拒绝服务攻击,安全模块综合后的面积仅占整个安全路由器面积的8.9％.