Mimic switch, network device and system

Abstract

The invention belongs to the field of network data exchange equipment, and particularly relates to a mimic switch, a network device and a system, and the mimic switch comprises a switch chip which isused as a data forwarding entity to complete regular forwarding of opposite-end data; a mimic scheduler which is responsible for uploading the message data to the heterogeneous control engine executorand issuing the message data to mimic scheduling of the exchange chip; and a plurality of heterogeneous control engine executors which are used for receiving messages sent by the mimic scheduler andcarrying out data processing and feedback through the heterogeneous equivalent function executors. According to the invention, a heterogeneous control engine and a scheduler are introduced into the control layer to realize dynamic heterogeneous redundancy of the control layer; aiming at unknown vulnerabilities, Trojans, rear doors and the like, seamless switching of a dynamic system is ensured, and the method has the advantages of redundancy, heterogeneity, dynamics, negative feedback characteristics, service jolting removal characteristics, safety mode division, endogenous safety characteristics, defense compatibility and the like, and has important guiding significance for development of network switching equipment.

Description

technical field [0001] The invention belongs to the field of network data exchange equipment, and in particular relates to a mimic switch, network equipment and a system. Background technique [0002] With the development of the Internet, people's demand for the network is increasing day by day, and the network is becoming more and more complex. The switch plays the role of the network hub. Therefore, it is very important to ensure the normal operation of the switch. At present, with the discovery of "Prism Gate" and Intel processor "Fuse & Specter" vulnerabilities, network security issues have attracted the attention of the network security field and even various countries. In the field of switches, various loopholes and backdoors continue to be exposed. For example, in early 2018, Cisco disclosed that 318 switches had loopholes and might have been infiltrated. The security and reliability of switches has become the top priority in current switch design. [0003] At prese...

AI Technical Summary

Problems solved by technology

Technologies such as access list control and anti-DDoS flooding need to issue configuration information through the processor and configure the corresponding functional modules of the switch chip to implement. The configuration information cannot be guaranteed not to be tampered with; The design is complex and has a certain impact on the performance of the switch; honeypot technology needs to add additional functional modules, and attack simulation will increase the load of the system

Although the current switch defense technology can solve the current security problems to a certain extent, it cannot more effectively solve the ever-evolving attack methods and unknown backdoors, unknown vulnerabilities and unknown Trojan horses

Images