At present, the biggest threat to cloud security comes from data leakage or loss in the cloud. The entire industry lacks an effective cloud security standard mechanism. Safety protection is first of all high precision, followed by good compatibility, high integration and comprehensive.
Inside Secure, a French professional embedded security solution, recently released a secure IP solution for high-speed network link layers.
Among the major security protection topics today, the need for secure encryption and decryption of Ethernet Layer-2 (MACsec Layer 2) is mainly to prevent important data from passing through physical network devices such as routers, bridges, and switches, as well as IP phones. A series of connected devices such as personal computers, printers, and network servers leaked. In addition, cloud servers and big data centers that provide big data transmission bandwidth services are also the focus of attention.
Link layer vulnerabiliTIes
In order to solve the information security protection of high-speed network traffic, the industry is moving from the application layer of the Ethernet layer 7 (ApplicaTIon layer) to the second layer of the hardware-based Ethernet layer (Ethernet Layer-2, MAC Layer-2). The security encryption and decryption specification of this layer is the IEEE 802.1AE standard (MACsec), which provides information packet transmission security between routers. Again, this specification is well suited for securing links between local area networks (LANs) and wide area networks (WANs). Under the MACsec specification, only authorized devices can gain network access and ensure the integrity and confidentiality of information transmitted over Ethernet frames.
At present, the MACsec standard has been widely adopted in the industry. The new generation of high-speed Ethernet and optical transport network (OpTIcal Transport Network) standards drive high-throughput requirements (400Gbps or higher), and also support the support of a large number of transport channels ( Port/channel) The need for flexible bandwidth configuration.
MACsec format
Typical applicaTIon Diagram
The hardware IP provided by security solution expert Inside Secure has the following features:
ï¬ US Federal Information Processing Standard (FIPS) certification passed
ï¬ Completely applicable to LAN and wide domain
ï¬ High throughput (400Gbps, 500Gbps, 600Gpbs)
ï¬ Hardware IP supports multiple frame lengths and various conversion formats
ï¬ Hardware IP supports multi-network applications (Ethernet, FlexEthernet, OTN)
ï¬ Multi-channel support and flexible bandwidth configuration
ï¬ Full support for IEEE 802.1AE standards and related updates
ï¬ Complete software support (driver development and key management)
Shenzhen Scodeno Technology Co.,Ltd , https://www.scodenonet.com