Abstract:
The team proposes a novel way to identify encryption on very large bandwidth
networks using netFPGAs. Encryption is illegal in our country unless licensed by
PTA; law enforcement agencies have no tools, software or hardware to identify
encryption being done on internet. The team proposes to design a hardware device
that will have the processing capacity to monitor a very large network [40G] in
sessions, identify different protocols, separate the encryption that is being done by
TSL, IPSec, SSH. the hardware will than authenticate the source addresses of the
encrypted packets from a PTA maintained database of authorized encryption users
and drop the packets from that source that is not authorized. The hardware design
will be implemented on netFPGAs. The software part is being worked upon using
.NET C# and sharpPcap.