CYSEP - A Cyber-Security Processor for 10Gbps Networks and Beyond

This paper describes the architecture of a CYber-SEcurity Processor (CYSEP) which can serve as a key module for enhancing security for high-speed networks/ systems. The CYSEP supports, at wire-speed, four major functions, namely, firewall/ intrusion detection, encryption/ decryption, message authentication, and Distributed Denial of Service (DDoS) attack protection. The CYSEP is to be implemented on an Application-Specific Integrated Circuit (ASIC) with the state-of-art CMOS 0.18-mircron technology and expected to operate at 10 Gbps or higher. Massive parallelism and pipelining technique are to be employed in the ASIC to achieve the 10 Gbps wire-speed operation.