• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.28 no.10B
• /
• pp.862-875
• /
• 2003

본 논문에서는 IEEE 802.11 규격을 기반으로 다중 홉 Ad Hoc 모드에서 비실시간 및 실시간 트래픽에 대한 통합 서비스를 지원하는 Wireless LAN을 구성할 때, 분산 방식으로 실시간 서비스의 우선권을 고려한 채널 액세스의 차별화를 제공할 수 있는 매체접근제어(Medium Access Control: MAC) 프로토콜의 구현 방안을 제안한다. 이를 위해 실시간과 비실시간 트래픽의 Contention Window (CW)를 서로 분리하며, 실시간 서비스의 지연 바운드에 따라 정해진 잔여 수명(residual time)을 우선권 설정에 반영함으로써 실시간 트래픽의 지연 요구 사항을 보장할 수 있도록 한다. 또한 실시간 트래픽의 부하에 따라서 적응적으로 offset 값을 조정함으로써 offset에 의해 발생될 수 있는 수율의 저하를 최소화한다. 제안된 방식은 기존 IEEE 802.11 MAC 규격의DCF (Distributed Coordination Function) 방식을 그대로 사용하면서 CSMA/CA 기반의 경쟁 방식을 통해서도 비실시간 트래픽과의 차별화가 가능하고, 또한 잔여 수명 시간을 고려한 동적인 우선권 할당이 가능하도록 하였다. 시뮬레이션에 의한 분석 결과에 따르면 기존 DCF와 비교할 때 실시간 단말의 용량을 2배까지 향상시킬 수 있으며, 트래픽 부하에 따라 적응적 제어를 통해 추가적인 성능 개선 효과를 확인하였다.

• Annual Conference of KIPS
• /
• 2008.05a
• /
• pp.968-970
• /
• 2008

기존에 트래픽 분류 방법으로 payload 분석이나 well-known port를 이용한 방법을 많이 사용했다. 하지만 동적으로 변하는 애플리케이션이 늘어남에 따라 기존 방법으로 애플리케이션 트래픽 분류가 어렵다. 이러한 문제의 대안으로 Machine Learning(ML) 알고리즘을 이용한 애플리케이션 트래픽 분류방법이 연구되고 있다. 기존의 논문에서는 일정 시간동안 수집한 data set을 사용하기 때문에 적게 발생한 애플리케이션은 제대로 분류하지 못하여도 전체적으로는 좋은 성능을 보일 수 있다. 본 논문에서는 이러한 문제를 해결하기 위해 각 애플리케이션마다 동일한 수의 data set을 수집하여 애플리케이션 트래픽을 분류하는 방법을 제시한다. ML 알고리즘 중 J48, REPTree, BayesNet, NaiveBayes, Multilayer Perceptron 알고리즘을 이용하여 애플리케이션 트래픽 분류의 정확도를 비교한다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2003.10c
• /
• pp.34-36
• /
• 2003

본 논문은 무선 LAN 상에서 단말간에 전송되는 트래픽의 서비스 품질을 차별화하고, 처리율 관점에서 기존의 IEEE 802.11e 프로토콜보다 향상된 서비스 품질을 제공하기 위한 새로운 백오프 방식을 제안한다. 제안된 백오프 방식은 단말의 수나 트래픽 손실률과 같은 서비스 영역의 정보를 분석하여 그 정보를 바탕으로 트래픽 특성에 따라 경쟁 윈도우를 동적으로 변화시켜 백오프 절차를 수행한다. 본 논문에서는 제안된 백오프 방식을 분석하기 위해 마코프 모델을 이용한 수학적 분석으로 기존의 IEEE 802.11e 백오프 방식과 비교 분석한다.

• The Transactions of the Korea Information Processing Society
• /
• v.5 no.8
• /
• pp.2117-2126
• /
• 1998

본 논문에서는 내부 스피드업을 갖는 배처-베니안 망 스위칭 구조에 관한 분석적 모델을 제안하고 성능분석 결과를 제시한다. 또한, 이 모델에서 다양한 큐잉 기법들이 다른 트래픽 분포하에서 비교된다. 높은 스위칭 스피드업을 갖는 배처-베니안 망에서, 입력 및 출력 트래픽 분포에 영향을 받는 버퍼링 기법의 성능은 전체 스위칭 망의 성능에 커다란 영향을 주게 된다. 따라서 본 고에서는 제안된 모델링 기법을 사용하여 베니안 망들의 큐잉 기법을 분석하며, 큐잉 기법을 통하여 큐잉 성능과 입력 트래픽의 관계를 규명한다.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.44 no.3 s.357
• /
• pp.33-40
• /
• 2007

In this paper, low-rate TCP attack as one of shrew attacks is considered and the scaling based dynamic time warping (S-DTW) algorithm is introduced. The low-rate TCP attack can not be detected by the detection method for the previous flooding DoS/DDoS (Denial of Service/Distirbuted Denial of Service) attacks due to its low average traffic rate. It, however, is a periodic short burst that exploits the homogeneity of the minimum retransmission timeout (RTO) of TCP flows and then some pattern matching mechanisms have been proposed to detect it among legitimate input flows. A DTW mechanism as one of detection approaches has proposed to detect attack input stream consisting of many legitimate or attack flows, and shown a depending method as well. This approach, however, has a problem that legitimate input stream may be caught as an attack one. In addition, it is difficult to decide a threshold for separation between the legitimate and the malicious. Thus, the causes of this problem are analyzed through simulation and the scaling by maximum auto-correlation value is executed before computing the DTW. We also discuss the results on applying various scaling approaches and using standard deviation of input streams monitored.

• Journal of IKEEE
• /
• v.13 no.2
• /
• pp.140-149
• /
• 2009

Traffic anomaly detection is one of important technology that should be considered in network security and administration. In this paper, we propose an abnormal traffic detection mechanism that includes traffic monitoring and traffic analysis. We develop analytical passive monitoring system called WISE-Mon which can inspect traffic behavior. We establish a criterion by analyzing the characteristics of a traffic training set. To detect abnormal traffic, we derive a hyperplane by using Fisher linear discriminant and chi-square distribution as well as the analyzed characteristics of traffic. Our mechanism can support reliable results for traffic anomaly detection and is compatible to real-time detection. In addition, since the trend of traffic can be changed as time passes, the hyperplane has to be updated periodically to reflect the changes. Accordingly, we consider the self-learning algorithm which reflects the trend of the traffic and so enables to increase the pliability of detection probability. Numerical results are presented to validate the accuracy of proposed mechanism. It shows that the proposed mechanism is reliable and relevant for traffic anomaly detection.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.38 no.10
• /
• pp.41-48
• /
• 2001

It is necessary to provide the QoS guaranteed end to-end routing services using the internet protocol through the connectionless network based on high speed network. From the above necessities, this paper classified the existing traffic into two type traffics such as real time traffics and non real time traffics and proposes the ATM based IP switching method with traffic type VC merging which allows many routes according to traffic type to be mapped to the same VC label. And this paper suggests the optimum switching architecture through simulation and performance analysis of proposed VC merging output module. From the simulation results, we confirmed the performance of the proposed method better than existing VC merging system under mixed traffic circumstances.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.19 no.4
• /
• pp.750-760
• /
• 1994

In this paper we proposed a multiplexing scheme of real time and non-real traffics in which a congestion control is embedded. Real time traffics are assumed to be nonqueuable and have preemptive priority over non-real time traffics in seizing the common output link, whereas the non-real time traffics wait in the common buffer if the output link is not available for transmission. Real time traffics are encoded according to the bandwidth reduction strategy, paticularly when congestion occurs among non-real time traffics. This scheme provides us an efficient way for utilizing the costly bandwidth resources, by accommodation as many real time traffics as possible with gauranteeing its mimimum bandwidth requirements, and also resloving the congestion encountered among non-real time traffics. We describe the system as a Markov queueing system, provide the analysis by exploiting the matrix geometric method, and present the performance for various performance measures of interest. Some numerical results are also provided.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.11 no.12
• /
• pp.1187-1192
• /
• 2016

Performance analysis results are limited to of network level, because network level transmission parameters are used for performance measure and analysis of network design, construction and operation on underwater MANET, With this way of performance analysis based on network level, it is not easy to analyze transmission performance related with user level transmission quality. In this paper, transmission performance focused on application traffic be required by user is investigated to supplement weakness of performance analysis based on network level. Voice traffic, which is expected to be increasingly used on underwater MANET, is considered as application service, Some conditions for underwater MANET will be proposed to support transmission quality, MOS, CCR and EED, etc.. A computer simulation based on NS-2 is used for performance measure, voice traffic is generated as VoIP specification.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.40 no.3
• /
• pp.575-585
• /
• 2015

The traffic classification is a preliminary and essential step for stable network service provision and efficient network resource management. However, the payload signature-based method has significant drawbacks in high-speed network environment that the processing speed is much slower than other methods such as header-based and statistical methods. In addition, as signature numbers are increasing, traffic analysis speed also declines because of signature matching method that does not consider analytic efficiency of each signature and traffic occurrence feature. In this paper, we propose a signature list reordering method in order by analytic value of each signature. When we reordered the signature list by the proposed method, we achieved about 30% improvement in speed of the traffic analysis compared with random signature list.