Route Development: high-value investment

Vrouters that control so much network traffic have proved that it is not easy for remote intruders to destroy the traffic. This seems to be against common sense. At the Black Hat Security Conference, a German security laboratory research institute claimed that although the development and utilization of routes are high targets, large-scale advanced development has emerged.

This is a high goal, in part because of the vro attributes and the widely deployed routing Operating System (Cisco IOS.

Vro does not expose many features to attackers. The routing protocol runs internally. In addition, the drawbacks of network devices are often fixed as functional problems because they require high availability.

Currently, policies that focus on client defects also protect vrouters because they rarely run as clients.

Some obvious defects in Cisco IOS have also increased the difficulty of attacks.

Cisco cannot recover from any errors in the software. The only wrong choice is to crash, so that it cannot be used by attackers.

IOS of any version does not have a standard image. Each image is based on a sketch, so the specific layout is not only affected by the version, but also depends on the compiled personnel. In terms of interoperability, this may lead to some problems, because interoperability advocates the overall upgrade of the device, despite this, it brings a lot of inconvenience to the attack. It is not easy for attackers to find an appropriate address to attack.

Therefore, most routing development involves configuration and internal attacks. However, this situation may change as the research progresses. Analysts of other IOS images can identify patterns and easily find the target address. However, it is not easy to keep the route running and perform development.

Good or bad depends on your opinion on things. This is true for some new services, such as VoIP. VoIP can generate more customer attack planes on the route.

The best protection for a vro is to disable similar services in the network device or in a separate architecture, and ensure that only the manager has the right to operate the vro.

1. Router principles, routing protocols, and Algorithms
2. Ensure Continuous Network Routing