• Journal of the Korea Society of Computer and Information
• /
• v.10 no.6 s.38
• /
• pp.253-260
• /
• 2005

Active networks not only allows the network nodes, switches or routers. to perform routing and forwarding but so allows their users inject customized programs into the nodes of the network or the packets. that may modify, store or redirect the user data flowing through the network. In this paper, we proposed a new network management system built using active network technology, that can solve problems inherent in most of existing legacy centralized network management systems. The main contribution is to present the Smart Router model that can reduce traffics due to managing networks by way of making control packets into simplified patterns. The disadvantages of the centralized network management are presented and the current solution for distributed network management are discussed. The performance improvements that our architecture offers are showed through a service example experiment.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.21 no.6
• /
• pp.1121-1126
• /
• 2017

Recently, the importance of smart gateways that link these with the big data and the development of the Internet of things is getting bigger. The smart gateway includes a network function such as a router and a router, and a sensor network function that links various objects such as a sensor. As the internet market has expanded, network stability and security problems have arisen and VPN technology has been proposed as one of the ways to solve these security problems. Efficient design is needed to implement VPN in low-end smart gateway and SOHO-level Internet environment with poor line quality. In this paper, we propose the concept and principle of VPN tunneling implementation and real - time traffic shaping method according to internet line condition in the Smart Gateway that supports IOT developed based on OpenWRT, the implementation and measured performance indicators are presented.

• Information and Communications Magazine
• /
• v.30 no.6
• /
• pp.26-32
• /
• 2013

Wi-Fi Direct는 Wi-Fi Alliance에서 인증한 Wi-Fi 기반기술로 AP (Access Point)나 라우터 같은 인프라장비 없이 단말 간에 직접 통신을 하는 프로토콜 방식을 의미한다. Wi-Fi Direct는 현재 스마트폰 뿐만 아니라 TV, 노트북, 프린터, 카메라와 같은 다양한 기기 등에 탑재되어 단말 간 직접 통신을 통하여 콘텐츠 및 서비스를 사용할 수 있는 기술이다. 본고에서 Wi-Fi Direct 기술을 동작 단계별로 구체적으로 살펴보고 새롭게 정의된 전력 절감 기술에 대해서도 살펴본다. 또한 Wi-Fi Direct 기반 응용 서비스를 알아본다.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.19 no.4
• /
• pp.13-19
• /
• 2019

SDN is one of the most actively researched topics to solve traffic problems in communication. SDN implements multiple networks in a single physical network by virtualizing network resources through an advanced API. Network Function Virtualized (NFV) distributes network functions from hardware using software instant, virtualization technology to VNF. These features make network management easier and improve performance by virtualizing IP, routers, and so on. In this paper, we propose a method to control the traffic and provide the distributed controller effect of SDN through SDN distribution in the virtualized industrial network. It is expected that SDN distribution will be able to manage traffic more efficiently when using the proposed scheme.

• Convergence Security Journal
• /
• v.17 no.5
• /
• pp.11-18
• /
• 2017

Now the ways in which information is exchanged by computers are changing, a variety of this information exchange method also requires corresponding change of responding to an illegal attack. Among these illegal attacks, the IP spoofing attack refers to the attack whose process are accompanied by DDoS attack and resource exhaustion attack. The way to detect an IP spoofing attack is by using traceback information. The basic traceback information analysis method is implemented by comparing and analyzing the normal router information from client with routing information existing in routing path on the server. There fore, Such an attack detection method use all routing IP information on the path in a sequential comparison. It's difficulty to responding with rapidly changing attacks in time. In this paper, all IP addresses on the path to compute in a coordinate manner. Based on this, it was possible to analyze the traceback information to improve the number of traceback required for attack detection.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2003.05c
• /
• pp.2213-2216
• /
• 2003

단일 호스트 환경에 특화되어 설계되어온 기존 침입탐지 시스템(Intrusion Detection System: IDS)은 침입 시 도메인의 보호만을 그 목적으로 하는 수동적인 성격으로써, 새로운 공격 기법에 대한 탐지 및 대응, 그리고 보다 그 규모가 큰 네트워크로의 확장 면에서 구조적인 결함을 가지고 있다. 이러한 IDS의 구조적 문제점의 해결방안으로 액티브 네트워크 기반의 IDS 에 관한 연구가 진행되고 있다. 액티브 네트워크(Active network)란 패킷 스위칭 네트워크 상에 프로그램 가능한 라우터 등인 액티브 노드들을 배치하고, 사용자의 요구에 상응하는 적절한 연산을 위한 데이터와 프로그램으로 구성된 스마트 패킷(smart packet)에 대하여 수행 가능하게 하는 접근 방법이다. 본 논문에서는 이를 기반으로 자율적이며 지능적인 에이전트로 구성된 멀티 에이전트 기술을 액티브 노드에 적용함으로써 기존 IDS 보안메커니즘에서 보다 러 진보된 능동적이고 적극적인 대응을 위한 보안 메커니즘을 제공하여 네트워크 공격에 의한 피해 최소화와 신속한 대응이 가능한 멀티 에이전트 기반 공격 대응 메커니즘을 제시하고, 이를 적용 가능한 액티브 네트워크 기반 프레임 설계를 제안한다.

• The Journal of the Korea Contents Association
• /
• v.13 no.2
• /
• pp.44-51
• /
• 2013

Routers should perform fast IP address lookup for Internet to provide high-speed service. In this paper, we present a hybrid parallel IP address lookup structure composed of four-stage pipeline. It achieves parallelism at low cost by using multiple SRAMs in stage 2 and partitioned TCAMs in stage 3, and improves the performance through pipelining. The smart distributor in stage 1 does not transfer any IP address identical to previous one toward the next stage, but only uses the result of the previous lookup. So it improves throughput of lookup by caching effects, and decreases the access conflict to TCAM bank in stage 3 as well. In the last stage, the reorder buffer rearranges the completed IP addresses according to the input order. We evaluate the performance of our parallel pipelined IP lookup structure comparing with previous hybrid structure, using the real routing table and traffic distributions generated by Zipf's law.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.36 no.11B
• /
• pp.1285-1296
• /
• 2011

Packet classification is one of the basic and important functions of the Internet routers, and it became more important along with new emerging application programs requiring real-time transmission. Since packet classification should be accomplished in line-speed on each incoming input packet for multiple header fields, it becomes one of the challenges in designing Internet routers. Various packet classification algorithms have been proposed to provide the high-speed packet classification. Hierarchical approach achieves effective packet classification performance by significantly narrowing down the search space whenever a field lookup is completed. However, hierarchical approach involves back-tracking problem. In order to solve the problem, set-pruning trie and grid-of-trie algorithms are proposed. However, the algorithm either causes excessive node duplication or heavy pre-computation. In this paper, we propose a smart set-pruning trie which reduces the number of node duplication in the set-pruning trie by the simple merging of the lower-level tries. Simulation result shows that the proposed trie has the reduced number of copied nodes by 2-8% compared with the set-pruning trie.

• Smart Media Journal
• /
• v.2 no.1
• /
• pp.8-16
• /
• 2013

The significant enhancement of the edge portion of computer networks including user-side machines and last mile network links encourages the research of the overlay network based data dissemination systems. Varieties of overlay network based data dissemination systems has distinct purposes, and each of them has a proper structure of an overlay network and a efficient communication protocol. In this paper, overlay network based data dissemination systems for Flash Dissemination, whose target is the distribution of relatively small size data to very large number of recipients within very short time, are explored. Mainly two systems, RECREW and FaReCAST, are introduced and analyzed in the aspects of design considerations for overlay networks and communication protocols. According to evaluations for flash dissemination scenarios, it is observed that the proposed overlay network based flash dissemination systems outperforms the previous overlay network based multicasting systems, in terms of the reliability and the dissemination delay. Moreover, the theoretical analysis of the reliability of data dissemination is provided by analysing FaReCAST.

• Journal of Digital Contents Society
• /
• v.19 no.4
• /
• pp.801-808
• /
• 2018

The performance test methodology for switch, router or integrated networks that make up the wired network is not clearly defined. Due to smart phones and multimedia traffic, the speed of the network is rapidly increasing to 100Gbps. However, there is no formalized test method, and performance test related parts are still being tested based on old data. Telecommunication companies and companies are testing their requirements in their own BMT, and government or public institutions are requesting performance tests from external organizations. As the demand for the performance test of next generation network equipments and the integrated network increases, analysis of the performance test method should be done as soon as possible. Therefore, in this paper, we analyze the performance test method performed by the institute and propose guidelines that can be applied to all wired network equipment.