基于AXI总线的安全防火墙研究与设计

Research and design of security firewall based on AXI bus

为了增强So C的总线访问安全,阻止非法地址的访问行为,提出了基于AXI总线的分布式安全总线防火墙架构。针对不同的任务制定了多级可动态更新的安全策略,设计了具有较低延时的高速总线防火墙接口,增加了安全更新模块来保证策略配置与更新安全,结合系统的任务管理机制实现了面向多任务处理的任务隔离机制。实验结果表明,该防火墙的传输延时小、资源消耗少,可实现任务隔离。

In order to enhance the access security of the SoC bus, for stopping the illegal address access, this paper presents a distributed bus architecture with firewall security based on AXI bus. According to the different task, a multi-level security policy which can be dynamically updated is developed, the bus firewall interface with high-speed and low latency is designed and in- creased with a security update module to ensure policy configuration and update security, combine with task management system it achieves the task oriented isolation mechanism of multi-tasking. The experimental results show that the transmission delay of the firewall is small, low resource consumption, can achieve the task of isolation.