基于路由器的黑匣子设计

Black Box Design Based on Routers

路由器的安全防护一直是网络服务商考量的重点。传统的安全机制主要依赖防火墙和网管日志,但它不能满足复杂条件下的安全要求。本文介绍了一种新的路由器内生安全机制——伴生黑匣,其关键实现是记录路由器一段时间的工作信息,用于故障回溯、设备重载等场景。本文介绍了路由器的安全系统架构,然后提出了伴生黑匣相关功能设计。

The security protection of routers has always been the focus of network service pro⁃viders.Traditional security mechanisms mainly rely on firewalls and network management logs,but they cannot meet the security requirements under complex conditions.This article intro⁃duces a new endogenous security mechanism of routers,the associated black box,the key imple⁃mentation of which is to record the work information of the router for a period of time for sce⁃narios such as fault backtracking and device overloading.This article first introduces the secu⁃rity system architecture of the router,and then proposes the design of the associated black box.