• Title/Summary/Keyword: 가상화 솔루션

Search Result 67, Processing Time 0.02 seconds

A Study on Security Hole Attack According to the Establishment of Policies to Limit Particular IP Area (특정 IP 영역 제한정책 설정에 따른 보안 취약점 공격에 관한 연구)

  • Seo, Woo-Seok;Jun, Moon-Seog
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.5 no.6
    • /
    • pp.625-630
    • /
    • 2010
  • With regard to the examples of establishing various sorts of information security, it can be seen that there are gradual, developmental procedures including Firewall and VPN (Virtual Private Network), IDS (Intrusion Detection System), or ESM(Enterprise Security Management). Each of the security solutions and equipments analyzes both defense and attack for information security with the criteria of classifying the problems of security policies by TCP/IP layers or resulted from attack patterns, attack types, or invasion through specialized security technology. The direction of this study is to examine latency time vulnerable to invasion which occurs when L2-stratum or lower grade equipments or policies are applied to the existing network through TCP/IP layer's L3-stratum or higher grade security policies or equipments and analyze security holes which may generate due to the IP preoccupation in the process of establishing policies to limit particular IP area regarding the policies for security equipments to figure out technological problems lying in it.

Design of Intrusion Responsible System For Enterprise Security Management (통합보안 관리를 위한 침입대응 시스템 설계)

  • Lee, Chang-Woo;Sohn, Woo-Yong;Song, Jung-Gil
    • Convergence Security Journal
    • /
    • v.5 no.2
    • /
    • pp.51-56
    • /
    • 2005
  • Service operating management to keep stable and effective environment according as user increase and network environment of the Internet become complex gradually and requirements of offered service and user become various is felt constraint gradually. To solve this problem, invasion confrontation system through proposed this log analysis can be consisted as search of log file that is XML's advantage storing log file by XML form is easy and fast, and can have advantage log files of system analyze unification and manages according to structure anger of data. Also, created log file by Internet Protocol Address sort by do log and by Port number sort do log, invasion type sort log file and comparative analysis created in other invasion feeler system because change sort to various form such as do log by do logarithm, feeler time possible.

  • PDF

The Study on Development of Technology for Electronic Government of S. Korea with Cloud Computing analysed by the Application of Scenario Planning (한국 전자정부와 클라우드 컴퓨팅 기술개발연구 - 시나리오플래닝을 적용하여 -)

  • Lee, Sang-Yun;Yoon, Hong-Joo
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.7 no.6
    • /
    • pp.1245-1258
    • /
    • 2012
  • This study is about development of technology for electronic government of S. Korea with cloud computing analysed by the application of scenario planning. As a society of knowledge and information has been developed rapidly, because of changing from web environment to ubiquitous environment, a lot of countries across the world as well as S. Korea for e-Government have a variety of changes with cloud computing service. So this research focused on the strategy consulting of e-Government of S. Korea with development of cloud computing technology analysed by the application of 'scenario planning' as a foresight method. As a result, the future policy for development of cloud computing technology for electronic government of S. Korea is to further spur the development of technology for hard ware and internet data center as SLA(Service Level Agreement) and service provisioning, more improvement of level of technology with soft ware solution as resource virtualization, open API(Application Programming Interface).

Network Slice Selection Function on M-CORD (M-CORD 기반의 네트워크 슬라이스 선택 기능)

  • Rivera, Javier Diaz;Khan, Talha Ahmed;Asif, Mehmood;Song, Wang-Cheol
    • KNOM Review
    • /
    • v.21 no.2
    • /
    • pp.35-45
    • /
    • 2018
  • As Network Slicing functionality gets applied to mobile networking, a mechanism that enables the selection of network slices becomes indispensable. Following the 3GPP Technical Specification for the 5G Architecture, the inclusion of the Network Slice Selection Function (NSSF) in order to leverage the process of slice selection is apparent. However, actual implementation of this network function needs to deal with the dynamic changes of network instances, due to this, a platform that supports the orchestration of Virtual Network Functions (VNF) is required. Our proposed solution include the use of the Central Office Rearchitected as a Data Center (CORD) platform, with the specified profile for mobile networks (M-CORD) that integrates a service orchestrator (XOS) alongside solutions oriented to Software Defined Networking (SDN), Network Function Virtualization (VNF) and virtual machine management through OpenStack, in order to provide the right ecosystem where our implementation of NSSF can obtain slice information dynamically by relying on synchronization between back-end services and network function instances.

Data Processing Architecture for Cloud and Big Data Services in Terms of Cost Saving (비용절감 측면에서 클라우드, 빅데이터 서비스를 위한 대용량 데이터 처리 아키텍쳐)

  • Lee, Byoung-Yup;Park, Jae-Yeol;Yoo, Jae-Soo
    • The Journal of the Korea Contents Association
    • /
    • v.15 no.5
    • /
    • pp.570-581
    • /
    • 2015
  • In recent years, many institutions predict that cloud services and big data will be popular IT trends in the near future. A number of leading IT vendors are focusing on practical solutions and services for cloud and big data. In addition, cloud has the advantage of unrestricted in selecting resources for business model based on a variety of internet-based technologies which is the reason that provisioning and virtualization technologies for active resource expansion has been attracting attention as a leading technology above all the other technologies. Big data took data prediction model to another level by providing the base for the analysis of unstructured data that could not have been analyzed in the past. Since what cloud services and big data have in common is the services and analysis based on mass amount of data, efficient operation and designing of mass data has become a critical issue from the early stage of development. Thus, in this paper, I would like to establish data processing architecture based on technological requirements of mass data for cloud and big data services. Particularly, I would like to introduce requirements that must be met in order for distributed file system to engage in cloud computing, and efficient compression technology requirements of mass data for big data and cloud computing in terms of cost-saving, as well as technological requirements of open-source-based system such as Hadoop eco system distributed file system and memory database that are available in cloud computing.

A Study on Stabilizing a Network Security Zone Based on the Application of Logical Area to Communication Bandwidth (통신 대역폭 논리영역 적용 기반의 네트워크 보안구간 안정화 연구)

  • Seo, Woo-Seok
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.16 no.5
    • /
    • pp.3462-3468
    • /
    • 2015
  • Regarding countless network disorders or invasions happening nowadays from 2014 until 2015, illegal access intended to attack through the communication line provided by ISP (Internet Service Provider) appears to be the source of the problem. As a defensive way to prevent such network-based attacks, not only stabilization structures for network communication but various policies as well as physical security devices and solutions corresponding to those have been realized and established. Therefore, now is the time to gain foundational research data to secure network security sections by producing logical area on communication bandwidth or such, suggest tasks to expand the communication line which is another research topic in the network security market, and recognize the fact that the active communication bandwidth linkage paradigm using network communication bandwidth is needed as one of the areas that can realize physical security. Additionally, it is necessary to limit the data in the forms of organizing visible security structures into a certain range of physical information by re-dividing communication capacity being currently provided by telecommunicators into subdivided organizational areas and applying the logical virtualization of communication capacity in each of the areas divided. By proposing a network security section based on a logical field application in place of the existing physical structure, basic data that designs a stable physical network communication structure will be provided.

Development of a smart cane concept for guiding the visually impaired - focused on design thinking learning practices for students - (시각장애인을 위한 길 안내용 스마트 지팡이 콘셉트 개발)

  • Park, Hae Rim;Lee, Min Sun;Yang, Ho Jung
    • Journal of Service Research and Studies
    • /
    • v.13 no.1
    • /
    • pp.186-200
    • /
    • 2023
  • This study aims to improve the usability of the white cane, which is walking equipment that most local visually impaired people use and carry when going out, and to contribute to the prevention of safety accidents and the walking rights of visually impaired people by providing improvement and resolution measures for the problems identified. Also, this study is a study on the visually impaired, primarily targeting the 1st to 2nd degree visually impaired people, who cannot go out on their own without walking equipment such as a white cane, corresponding to 20% among approximately 250,000 blind and low vision people in the Korean population. In the study process, the concept has been developed from the user's point of view in order that the white cane becomes a real help in the walking step of the visually impaired and the improvement of usability of the white cane, the main walking equipment for the visually impaired, are done by problem identification through the Double Diamond Model of Design Thinking (Empathize → Define → Ideate → Prototype → Test (verify)). As a result of the investigation in the process of Empathy, a total of five issues was synthesized, including an increase in the proportion of the visually impaired people, an insufficient workforce situation to help all the visually impaired, an improvement and advancement of assistive devices essential for the visually impaired, problems of damage, illegal occupation, demolition, maintenance about braille blocks, making braille block paradigms for the visually impaired and for everyone. In Ideate and Prototype steps, situations derived from brainstorming were grouped and the relationship were made through the KJ method, and specific situations and major causes were organized to establish the direction of the concept. The derived solutions and major functions are defined in four categories, and representative situations requiring solutions and major functions are organized into two user scenarios. Ideas were visualized by arranging the virtual Persona and Customer Journey Map according to the situation and producing a prototype through 3D modeling. Finally, in the evaluation, the final concept derived is a device such a smart cane for guidance for the visually impaired as ① a smart cane emphasizing portability + ② compatibility with other electronic devices + ③ a product with safety and convenience.