• Proceedings of the Korea Information Processing Society Conference
• /
• 2011.11a
• /
• pp.823-826
• /
• 2011

VPN을 구성하기 위해서는 각각의 단말기(PC)에 VPN장치를 장착하거나, 공중망으로 연결하는 라우터에 VPN장치를 장착해야만 한다. 본 논문은 VPN 장비 없이, NDIS Driver를 개발하여 장비 없이 언제 어디서든 VPN을 구성하여, 보안성과 이동성, 효율성을 높여 해킹으로부터 안전한 네트워크를 구축하는 것이 목표이다.

• KIISE Transactions on Computing Practices
• /
• v.20 no.12
• /
• pp.632-639
• /
• 2014

In this paper, we propose a PC's self-monitoring system for protecting illegal outflow of important personal files, which are managed in the Windows environment PC. This paper is based on the idea that it should be a read (access) file operation in order to outflow files through the network. To compare the information (name, some content) obtained from all operations of the reading of the 'Windows File System Driver' and captured transmission packets of mini port of 'Windows NDIS (Network Driver Interface Specification) Driver', and, if two pieces of information match, this system will determine the transmission to user. In this paper, tentatively, we developed a function to gather file information about file read operation and developed a function for transmission packet capture. This demonstration implementation showed that the proposed process has validity and the proposed process verified that it does not significantly affect the PC's performance.

• The Journal of The Korea Institute of Intelligent Transport Systems
• /
• v.7 no.6
• /
• pp.92-100
• /
• 2008

Ad-hoc network is a collection of wireless mobile hosts forming a temporary network without the aid of any centralized administration or reliable support services such as wired network and base stations. Recently, Ad-hoc networks are evolving to support multimedia contents according to expansion of ad hoc multi-hop communication system. Wireless ad-hoc network is different from the conventional wired network by frequent changes in network topology, number of routers and resources, there are a number of problems in applying conventional routing protocol to ad-hoc network. The AODV routing protocol is proposed for mobile node in ad-hoc networks. AODV protocol that provides to guarantee QoS for data transmission in ad hoc networks that link break frequently occurs. In this paper, AODV routing protocol based NDIS(Network Driver Interface Specification) is implemented. We design high performance image transmission that can operate with software(AODV) for ad-hoc networks without degradation. and verify operation of AODV routing protocol on the test bed.

• The Transactions of the Korea Information Processing Society
• /
• v.4 no.10
• /
• pp.2521-2532
• /
• 1997

The next generation internet protocol, IPv6, have been developed by the IETF according to the requirements of enhancement of classic IP protocols to satisfy the lack of Internet address space as well as the support of multimedia applications. This paper presents an implementation of IPv6 protocols on the Windows NT kernel environment. In this work, we developed and also tested the basic functions, required for operating as an IPv6 host, such as IPv6 header processing, IPv6 address handling, control message processing, group membership processing and neighbor discovery functions. The implemented IPv6 protocol driver module is connected to the lower network interface card through NDIS, a standard network interface. And this driver module that operates within kernel, is implemented as it is connected to upper user applications and lower NDIS using dispatch and lower-edge functions. The developed IPv6 protocol driver can provide not only enhanced performance because it is implemented in kernel mode, but also convenience of usage to the application developers because it gives user interface as a dynamic link library.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2000.10b
• /
• pp.1117-1120
• /
• 2000

인터넷 소프트웨어 개발자는 인터넷 보안 소프트웨어, 네트워크 실습 교육용 소프트웨어 등의 다양한 서비스 개발을 위해, 데이터 링크 계층의 프레임에 직접 접근하는 방법을 요구한다. 이러한 개발자를 위해, Windows 2000은 사용자 계층에서 인터넷 관련 네트워크 자원에 접근할 수 있는 Winsock, NPP, Internet Protocol Helper API를 지원한다. 하지만, 개발자가 이러한 API, 특히 Winsock API를 통해 직접 데이터 링크 계층의 프레임에 접근하는 데에는 한계가 있다. 따라서, 본 논문에서는 NDIS Library를 이용하여 일반 개발자가 손쉽게 데이터 링크 계층의 프레임에 접근할 수 있는 packet driver API를 설계하였다. API를 구성하는 각 클래스는 계층적 구조로 설계하였으며 Visual C++를 사용하여 구현하였다.

• Proceedings of the IEEK Conference
• /
• 1999.06a
• /
• pp.1129-1132
• /
• 1999

This paper deals with the design and implementation of an Ethernet-based communication protocol to be used in PC-based I/O interface systems. Recently, the performance of PC systems is being highly improved and Ethernet is used as the stable communication network over the world. We develop a new protocol driver with the capability of accessing Ethernet directly using NDIS(Network Driver Interface Specification), the network interface standard of Windows O.S. in PC, and install it at the application layer of the protocol structure. Its major roles are the supplement of CSMA/CD algorithm, the effective use of the long data frame of Ethernet, and the real-time transmission of data frames. This paper represents the possibility of the real-time control network and systems based on PCs and Ethernet.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2012.04a
• /
• pp.533-536
• /
• 2012

인터넷의 급격한 성장과 함께 컴퓨터 통신 이용률이 폭발적으로 증가함에 따라 여러 악성코드가 등장하게 되었다. 이러한 악성코드는 시스템의 비정상 동작 유발, 네트워크 성능 저하, 개인정보유출의 문제를 발생시킨다. 현재의 악성코드 분석은 Signature 분석이 대부분이며, Signature 분석은 특정 패턴의 악성코드는 빠르게 탐지하나, 변조된 코드는 탐지하지 못하며, 이미 피해가 널리 퍼진 뒤 분석 및 차단이 가능하다는 단점을 가진다. 따라서 본 논문은 NDIS(Network Driver Interface Specification)를 이용하여 악성코드에 대해 수동적인 Signature 분석의 단점을 보완 하는 시스템 및 네트워크 상태 분석모델을 제시 하여 보다 능동적인 탐지 및 차단 프로세스를 정의하고, 모델 구현을 위한 방법을 제시한다.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.35 no.4B
• /
• pp.677-686
• /
• 2010

In this paper, we propose the virtual interface management scheme on the multi-mode mobile node for supporting multiple connections to various access networks in fixed mobile convergence (FMC) networks. The proposed scheme supports the virtualization of multiple physical network interfaces by presenting only the virtual interface to beyond IP layers and hiding physical network interfaces from them. In the proposed scheme, only one IP address is allocated to virtual interface without any IP allocations to physical network interfaces. Therefore, the proposed scheme does not change its IP address and keep it during the vertical handover, so that it can support the seamless handover of real-time multimedia services among heterogeneous access networks. The proposed scheme is implemented on the multi-mode mobile node with multiple network interfaces by using NDIS (Network Driver Interface Specifications) libraries. Through the mobility test-bed and the test application of virtual interface, we evaluate and analyze the performance of the proposed scheme.

• Proceedings of the KIEE Conference
• /
• 2004.11c
• /
• pp.243-245
• /
• 2004

This paper proposes design and implementation for Seamless Handoff method between adapters in a system environment where both wired and wireless adapters are present First of all, by settingLayer 2 address of wired adapter to Layer 2address of wireless adapter, then generate virtual adapter on the above layer to make these two adapters operate on an IP address. Under the condition, when wired communication via the wired adapter gets disconnected while in service, wireless handoff occurs by mapping information on the wireless adapter to the virtual adapter. According to the method proposed in this paper, continuous session can be obtained even when handoff between wired and wireless adapters occurs at lower level in an application where both IP address and Port address are used to maintain session since If address does not change.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2001.04b
• /
• pp.603-606
• /
• 2001

최근 윈도우에서는 다양한 종류의 인터넷 소프트웨어가 개발되고 있다. 윈도우를 지원하기 위해 다양한 네트웍 API가 제공되고 있다. 인터넷 소프트웨어 중 보안, 인터넷 공유, 네트워크 교육용 소프트웨어 등은 기본적으로 라우팅에 관련된 기능을 포함하고 있어야만 한다. 그러나 일반적으로 사용자 계층에서 제공하고 있는 Winsock, NPP 등의 네트웍 API는 데이터 링크 계층에 직접적인 접근이 불가능하여 라우팅 기능 구현에 적당하지 않다. 따라서, 본 논문에서는 NDIS library를 이용하여 일반 개발자가 손쉽게 데이터 링크 계층의 프레임에 접근할 수 있는 Packet driver API를 설계하고 이를 기반으로 패킷 스케줄링을 지원 할 수 있는 Windows 기반의 라우터를 설계 및 구현하였다.