CYSEP - a cyber-security processor for 10 Gbps networks and beyond

In this paper, we describe the architecture of a cyber-security processor (CYSEP) which can serve as a key module for enhancing security for high-speed networks/ systems. The CYSEP supports, at wire-speed, four major functions, namely, firewall/ intrusion detection, encryption/decryption, message authentication, and distributed denial of service (DDoS) attack protection. The CYSEP is to be implemented on an application-specific integrated circuit (ASIC) with the state-of-art CMOS 0.18-micron technology and expected to operate at 10 Gbit/s or higher, Massive parallelism and pipelining techniques are to be employed in the ASIC to achieve the 10 Gbit/s wire-speed operation.