• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.15 no.10
• /
• pp.6310-6316
• /
• 2014

The increase in the Internet and smart device users requires high-level network security. Network security consists of Web Firewall, Network Firewall, IPS, DDoS system, UTM (Unified Treat Management), VPN, NAC (Network Access Control), Wireless security, Mobile security, and Virtualization. Most network security solutions running on IPv4, and IPv6 network services are not sufficiently ready. Therefore, in this paper, this study designed and implemented important functions of Network Access Control (NAC), which include IPv6 host detection, isolation, blocking and domain assignment for the IPv6 network. In particular, domain assignment function makes 128 bits IPv6 address management easy. This system was implemented on a KISA IPv6 test-bed using well known devices. Finally, the test result showed that all IPv6 based wired and wireless devices were well-controlled (detection, blocking, isolation and domain assignment).

• Proceedings of the Korean Information Science Society Conference
• /
• 1998.10a
• /
• pp.483-485
• /
• 1998

6Bone(IPv6 Backbone)은 IPv6 환경의 개발 촉진 및 진화를 위해 만든 전세계적인 실험망이다. 본 논문은 국내 6Bone인 6Bone KR의 구축을 위해 주소 할당 및 라우팅 규칙을 정의한 내용을 기술한다. 기존의 6Bone 주소 구조를 알아보고, 6Bone KR의 주소 체계가 어떻게 기존의 6Bon을 따르면서, 6Bone KR의 계층적 전개를 위한 연결 규칙을 가지는 가를 살펴본다. 그리고 현재 6Bone KR이 구성된 상황과 개발한 연결 테스트의 프로그램을 소개한다. 이밖에 6Bone KR진화를 위한 몇 가지 고려사항들을 분석하고, 이것을 기반으로 Renumbering을 이용한 새로운 이동 IPv6 환경을 제안한다.

• Journal of KIISE:Computing Practices and Letters
• /
• v.14 no.4
• /
• pp.441-445
• /
• 2008

Korean military is propelling the M&S on new warfare concept, such as NCW(Network Centric Warfare) which is the aspect of future war. IPv6 is the essential element of next generation defense network which is supporting the future battlefield. There have been many studies on allocating the IPv6 address for next generation defense network. However, they assigned the address by level on the basis of the military organization or assigned it from the service network, so it had the defect, the big size routing table. This study reviews the topology of next generation defense network and adjusts the position of service network ID on the basis of the network topology. Finally, it improved the efficiency of route aggregation and minimized the routing table size in comparison with the previous studies and it was proved by OPNET simulator.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.8 no.5
• /
• pp.95-103
• /
• 2008

The Network Mobility (NEMO) basic support protocol extends the operation of Mobile IPv6 to provide uninterrupted Internet connectivity to the communicating nodes of mobile networks. The protocol is not efficient to offer delays in data delivery and higher overheads in the case of nested mobile networks because it uses fairly sub-optimal routing and multiple encapsulation of data packets. In this paper, our scheme combining Hierarchical Mobile IPv6 (HMIPv6) functionality and Hierarchical Prefix Delegation (HPD) protocol for IPv6, which provide more effective route optimization and reduce packet header overhead and the burden of location registration for handoff. The scheme also uses hierarchical mobile network prefix (HMNP) assignment and tree-based routing mechanism to allocate the location address of mobile network nodes (MNNs) and support micro-mobility and intra-domain data communication. The performance is evaluated using NS-2.