Reconfigurable Architectures and Design Automation Tools for Application-Level Network Security

The relevance of the Internet has dramatically grown in recent decades. However, the enormous financial impact attracts many types of criminals. Setting up proper security mechanisms (e.g., Intrusion Detection Systems) has therefore never been more important than today. To keep up with today's data transfer rates (10 to 100 Gbit/s), dedicated hardware accelerators have been proposed to offload compute intensive tasks from general purpose processors. A key technology of particular interest for this scenario is the use of reconfigurable hardware, e.g., the Field Programmable Gate Array (FPGA). This work addresses their implementation in the domain of interactive communication applications, going beyond the regular packet-level operations often seen in this context. A newly developed FPGA platform (NetStage) provides the foundation for rapidly prototyping such applications. A sample application built on top of NetStage is the hardware honeypot MalCoBox. It not only serves as a proof-of-concept, but was also successfully evaluated in a live data center setting. To counter the difficulty of programming reconfigurable architectures for non-hardware designers, the domain-specific language Malacoda has been developed. Malacoda allows the high-level coding of honeypot communication dialogs, which is then automatically compiled into hardware blocks for insertion into NetStage. Together, NetStage and Malacoda address some of the key hindrances for the more widespread use of reconfigurable computing in communications applications.