The Design And Implementation Of A Cyber Security Isolation System For Video Surveillance Based On FPGA

In the field of security,monitoring equipment has become the necessary equipment.The cyber security of surveillance camera equipment is not controlled.Therefore,the security device needs to be introduced to isolate the external network monitoring source from the internal network,to ensure that the threats caused by the external network environment,devices do not affect the security of data,devices and network environments in the internal network.This paper implements a set of applicable network security solutions in public security video surveillance system,which is used to control the external video surveillance network access to the internal core network.A system designed to securely isolate Ethernet surveillance cameras from surveillance servers.This scheme has the characteristic of the high-speed Ethernet.It satisfies,in the internal network,to open the high-definition compression video flow of multiple external network surveillance cameras at the same time,while the monitoring video does not have any catapult.And it satisfies the convenience so that the network environment on both ends of the system does not need any change when arranged,which realizes plug and use.The internal and external network system uses Gigabit full-duplex standard Ethernet ports.This solution uses FPGA as main network data isolation processing device,using pure digital logic to achieve the ultra-low latency physical security network isolation scheme of detecting,monitoring,filtering,reassembling and forwarding Ethernet packets in transparent transmission.This design and implementation of the hardware platform consists of 1219 components and more than 4000 netlists.The 10-layer PCB system hosts high-speed modules such as FPGA module,multi Gigabit Ethernet ports,PCIe,4-core ARM module,DDR3-SDRAM,SATA,etc.In this process,author successfully dealed with the challenges of high-speed signal such as SI,PI and EMC,overcame the engineering problems of network equipment compatibility,high-density alignment and factory production flow.This article designs and implements a variety of interfaces between FPGA and hardwares,and efficient network security isolation program.This solution introduces the security measures into each network protocol,as well as equipment across network segment communication solutions.This paper uses the transparent transmission mode with the flow style operation to achieve the two-way transparent,high bandwidth and ultra-low processing delay characteristics.So that it provides a novel and highperformance processing solution for the safe isolation of network equipment for the future research.This article also gives out a Web application based on embedded HTTP server for users to configure security policies friendly.