摘要： 重放攻击是一种常见的网络攻击手段，为了提高网络设备的安全性，提出一种基于FPGA实现抗重放攻击的设计方案。结合工程实践，首先介绍了安全连接通信原理，并详细讨论了抗重放实现机制，在此基础上创造性提出多路安全连接并发抗重放设计方案。测试结果表明，该技术能够满足多路安全连接通信的同时实现抗重放的应用需求，而且实现协议简单，数据吞吐率高，对工程实现有一定的借鉴意义。

中图分类号： TN919.4
文献标识码： A
DOI： 10.20044/j.csdg.2097-1788.2022.01.013
引用格式： 陈明，张宏亮，邓军，等. 基于FPGA的多路安全连接抗重放攻击设计实现[J].网络安全与数据治理，2022，41(1)：83-87，100.

Design and implementation of multipath security connection anti-replay attack based on FPGA

Abstract： Replay attack is a common network attack method. To improve the security of network devices, a design scheme of anti-replay attack based on FPGA is proposed. Combined with engineering practice, firstly the communication principle of security connection is introduced, then the implementation mechanism of anti-replay attack is discussed in detail. On this basis, an anti-replay design scheme for multipath security connection is proposed. The research results show that the technology can meet the requirements of multipath security connection communication and anti-replay attack. The implementation protocol of the method is simple and the data throughput rate is high, which can be used for reference in engineering implementation.

Key words : anti-replay；security connection；multipath parallelism；FPGA