Research Notes: Distributed Shadow for Router Security Defense

Router security defense technologies emerging in recent years could hardly detect and block the new booming threats with unknown signatures such as hardware Trojan, zero-day attacks, etc. We present a novel router defense technology, distributed router shadow, which builds a closed execution environment to deceive attacks entering into the router, thereby misleading the attackers into regarding it as the real attack target and executing the suspicious code to maximize the chances of detonating the system exploit; thus the original router is prevented from attacking and the suspicious code can be detected. Our experiment and analysis show that the router shadow can defend not only attacks with signature but also some new attacks without signature.

Design and Performance Evaluation of Distributed Virtual Router Based on OpenStack

With the booming of Cloud Compute, OpenStack has been more widely used in Data Center, but in tradition deployment of OpenStack, the traffic must traverse network node to get routing decision. So the network node would be a bottle-neck due to the increasing amount of data flow. In order to solve this problem, this paper propose an extensible design, we create a internal virtual router in each compute node, the internal virtual router just can process the East-West traffic in lay2. With the help of distributed router, the East-West traffic can be delivered directly from the source hypervisor to the destination hypervisor, no longer need to traverse the router in network node to get routing decision, Therefore, North-South and East-West traffic don't impact each other anymore. North-South traffic enjoys all the bandwidth of router in network node exclusively, hence reduce the load of the network node. Experiment results show that OpenStack with distributed router has a much better performance evaluation than original OpenStack. This will dramatically increase the total bandwidth, and also bring other advantages.