Method and apparatus for internet protocol (IP) logical wire security

摘要

A method and apparatus for improved approaches for detection of exploits and drift in a network is described. The method includes: determining, by a processor, a logical configuration of a network comprising a plurality of links connecting a plurality of nodes; determining, by the processor, a physical path corresponding to one of the links, the physical path including a plurality of switches of the network, wherein the processor is configured to determine whether data sent on one of the nodes to another one of the nodes by the one link is received at the other node; receiving an error detection value computed by one of the switches; and determining, by the processor, whether the error detection value corresponds with a value inaccessible to the one switch.

主权项

1. A method comprising:
determining, by a processor, a logical configuration of a network comprising a plurality of links connecting a plurality of nodes; determining, by the processor, a physical path corresponding to one of the links, the physical path including a plurality of network switches of the network, wherein the processor is configured to determine whether data sent on one of the nodes to another one of the nodes via the one link is received at the other node; receiving an error detection value computed by one of the network switches using either data stored in one or more routing tables of the one network switch, a configuration type of the one network switch, or a combination thereof; and validating, by the processor, the one network switch as secured from one or more exploits of the network by determining that the error detection value is identical to a value inaccessible to the one network switch.