Comparing IO visor and Pcap for security inspection of traced packets from smartx box

Abstract

With the dawn of distributed cloud computing technology running on hyper-converged box-style hardware, infrastructure operators are facing two challenges of minimizing resource overhead and ensuring infrastructure security. In this paper, we try to compare IO Visor-based and pcap-based packet tracing for security inspection of traced packets from Linux-based hyper-converged SmartX Box. For security inspection, we implement the integration of IO Visor packet tracing with Bro IDS by employing customized scripting and experimentally validate the security inspection performance.