• 제목/요약/키워드: Network-based

검색결과 25,959건 처리시간 0.043초

SNMPv3 통신망의 정책기반 보안관리를 위한 역할기반 보안관리 모델의 설계 및 분석 (Design and Analysis of Role-based Security Management Model for Policy-based Security Management in SNMPv3 Network)

  • 주광로;이형호;노봉남
    • 정보처리학회논문지C
    • /
    • 제8C권5호
    • /
    • pp.573-584
    • /
    • 2001
  • 정책기반 통신망관리 시스템은 다양한 사용자의 요구에 부응하고 대형화, 분산화되는 통신망의 효과적인 관리에 적합한 아키텍처이다. 이 시스템에서의 통신망 관리자는 각 통신망 구성요소에 대한 직접적인 동작설정 대신 미리 설정한 규칙에 따라 통신망 구성요소나 서비스의 동작을 결정하게 된다. 한편, 융통성있는 통신망 관리 프레임워크를 제시한 SNMPv3는 인증, 암호화, 접근통제 등의 보안서비스를 제공함으로써, 이전 SNMP 버전들이 제공하지 못했던 안전한 통신망 관리를 위한 기반기술을 제공하고 있다. 그러나, SNMPv3의 개선된 보안서비스에도 불구하고 통신망 관리자별로 인증과 암호화 과정에 이용되는 보안정보가 관리되고, 보안정보가 통신망 구성요소에 분산되어 있어 중앙집중방식의 체계적인 보안관리기능이 제공되지 않아 여러 관리자에 의해 운영되는 대규모 통신망을 효과적으로 관리하는데 부적합한 문제점을 가지고 있다. 본 논문에서는 중앙집중방식의 규모확장성과 통신망 보안관리기능을 제공하기 위해 보안관리정책을 지원하는 역할기반 보안관리 모델을 제시하고, 이를 추가한 SNMPv3의 확장된 보안시스템의 구조, 동작절차 및 보안관리 관점에서의 효율성 분석에 대해 기술한다.

  • PDF

Resilient Packet Transmission (RPT) for the Buffer Based Routing (BBR) Protocol

  • Rathee, Geetanjali;Rakesh, Nitin
    • Journal of Information Processing Systems
    • /
    • 제12권1호
    • /
    • pp.57-72
    • /
    • 2016
  • To provide effective communication in the wireless mesh network (WMN), several algorithms have been proposed. Since the possibilities of numerous failures always exist during communication, resiliency has been proven to be an important aspect for WMN to recover from these failures. In general, resiliency is the diligence of the reliability and availability in network. Several types of resiliency based routing algorithms have been proposed (i.e., Resilient Multicast, ROMER, etc.). Resilient Multicast establishes a two-node disjoint path and ROMER uses a credit-based approach to provide resiliency in the network. However, these proposed approaches have some disadvantages in terms of network throughput and network congestion. Previously, the buffer based routing (BBR) approach has been proposed to overcome these disadvantages. We proved earlier that BBR is more efficient in regards to w.r.t throughput, network performance, and reliability. In this paper, we consider the node/link failure issues and analogous performance of BBR. For these items we have proposed a resilient packet transmission (RPT) algorithm as a remedy for BBR during these types of failures. We also share the comparative performance analysis of previous approaches as compared to our proposed approach. Network throughput, network congestion, and resiliency against node/link failure are particular performance metrics that are examined over different sized WMNs.

얼굴 인식과 추적을 이용한 ROI 기반 영상 통화 코덱 설계 및 구현 (ROI-based Encoding using Face Detection and Tracking for mobile video telephony)

  • 이유선;김창희;나태영;임정연;주영호;김기문;변재완;김문철
    • 대한전자공학회:학술대회논문집
    • /
    • 대한전자공학회 2008년도 하계종합학술대회
    • /
    • pp.77-78
    • /
    • 2008
  • With advent of 3G mobile communication services, video telephony becomes one of the major services. However, due to a narrow channel bandwidth, the current video telephony services have not yet reached a satisfied level. In this paper, we propose an ROI (Region-Of-Interest) based improvement of visual quality for video telephony services with the H.264|MPEG-4 Part 10 (AVC: Advanced Video Coding) codec. To this end, we propose a face detection and tracking method to define ROI for the AVC codec based video telephony. Experiment results show that our proposed ROI based method allowed for improved visual quality in both objective and subjective perspectives.

  • PDF

Embedded Linux 기반의 UPnP를 사용한 홈-네트워크 서버 구현 (Implementation of Home-Network Sewer using UPnP based on the Embedded Linux)

  • 정진규;진선일;이희정;황인영;홍석교
    • 대한전기학회논문지:시스템및제어부문D
    • /
    • 제53권9호
    • /
    • pp.638-643
    • /
    • 2004
  • Middleware enables different networking devices and protocols to inter-operate in ubiquitous home network environments. The UPnP(Universal Plug and Play) middleware, which runs on a PC and is based on the IPv4 protocol, has attracted much interest in the field of home network research since it has versatility The UPnP, however, cannot be easily accessed via the public Internet since the UPnP devices that provide services and the Control Points that control the devices are configured with non-routable local private or Auto IP networks. The critical question is how to access UPnP network via the public Internet. The purpose of this paper is to deal with the non-routability problem in local private and Auto IP networks by improving the conventional Control Point used in UPnP middleware-based home networks. For this purpose, this paper proposes an improved Control Point for accessing and controlling the home network from remote sites via the public Internet, by adding a web server to the conventional Control Point. The improved Control Point is implemented in an embedded GNU/Linux system running on an ARM9 platform. Also this paper implements the security of the home network system based on the UPnP (Universal Plug and Play), adding VPN (Virtual Private Network) router that uses the IPsec to the home network system which is consisted of the ARM9 and the Embedded Linux.

A Novel Framework for APT Attack Detection Based on Network Traffic

  • Vu Ngoc Son
    • International Journal of Computer Science & Network Security
    • /
    • 제24권1호
    • /
    • pp.52-60
    • /
    • 2024
  • APT (Advanced Persistent Threat) attack is a dangerous, targeted attack form with clear targets. APT attack campaigns have huge consequences. Therefore, the problem of researching and developing the APT attack detection solution is very urgent and necessary nowadays. On the other hand, no matter how advanced the APT attack, it has clear processes and lifecycles. Taking advantage of this point, security experts recommend that could develop APT attack detection solutions for each of their life cycles and processes. In APT attacks, hackers often use phishing techniques to perform attacks and steal data. If this attack and phishing phase is detected, the entire APT attack campaign will be crash. Therefore, it is necessary to research and deploy technology and solutions that could detect early the APT attack when it is in the stages of attacking and stealing data. This paper proposes an APT attack detection framework based on the Network traffic analysis technique using open-source tools and deep learning models. This research focuses on analyzing Network traffic into different components, then finds ways to extract abnormal behaviors on those components, and finally uses deep learning algorithms to classify Network traffic based on the extracted abnormal behaviors. The abnormal behavior analysis process is presented in detail in section III.A of the paper. The APT attack detection method based on Network traffic is presented in section III.B of this paper. Finally, the experimental process of the proposal is performed in section IV of the paper.

오프라인 커뮤니케이션 유무에 따른 네트워크 별 정보전달 방법 비교 분석 (A Comparative Study of Information Delivery Method in Networks According to Off-line Communication)

  • 박원국;최찬;문현실;최일영;김재경
    • 지능정보연구
    • /
    • 제17권4호
    • /
    • pp.131-142
    • /
    • 2011
  • 최근 페이스북, 트위터 등 다양한 소셜 네트워크 서비스(SNS)가 등장하였으며, 많은 사용자들이 SNS를 이용하고 있다. 이러한 사용자의 증가로 인해 많은 조직들은 SNS에 관심을 가지게 되었다. 조직에서 SNS의 사용은 다양한 이점을 지니고 있다. SNS를 통해 조직들은 사용자들의 행위에 신속하고 지속적으로 반응할 수 있고, 다양한 특성을 지닌 사용자에게 쉽게 접근할 수 있으며, 타 매체에 비하여 사용자 특성이 반영된 차별화된 전략을 세울 수 있다. 또한 기업들은 SNS를 통해 상대적으로 저렴한 비용으로 활용이 가능하며, 사용자들과 양방향 소통이 가능하여 친근성과 신뢰성이 있는 관계 구축이 용이하다. 그러나 네트워크의 특성에 따라 SNS의 정보전달의 효과가 다르게 나타남에도 불구하고 조직들은 네트워크의 특성을 고려하지 않고 획일화된 방법으로 SNS를 활용하여 사용자들과 커뮤니케이션하고 있다. 따라서 본 연구에서는 네트워크에 따른 SNS의 정보전달의 효과 차이를 분석하였다. 즉 오프라인에서의 커뮤니케이션 기반으로 형성된 네트워크와 무작위로 형성된 네트워크를 생성하여, 각각의 네트워크들의 특징 차이를 분석하기 위하여 소셜 네트워크 분석을 하였다. 또한, 각각의 네트워크에서 SNS를 이용한 정보 전달 효과의 차이가 있는지 실증적으로 검증하였다. 실증 분석후 네트워크의 특성에 따라 네트워크 내 사용자들은 SNS를 받아들이는 반응이 달랐다. 따라서 조직이 효과적인 마케팅 수단으로 소셜 네트워크를 활용하기 위해서는 그 목적에 따라 네트워크의 특성을 고려하여 적절한 네트워크 형태를 구성해야 함을 도출하였다.

CAN기반 피드백 시스템의 고속전철 여압시스템 적용 (Application of a CAN-Based Feedback Control System to a High-Speed Train Pressurization System)

  • 김홍렬;곽권천;김대원
    • 제어로봇시스템학회논문지
    • /
    • 제9권11호
    • /
    • pp.963-968
    • /
    • 2003
  • A feedback control implementation for a high speed train pressurization system is proposed based on CAN (Controller Area Network). Firstly, system model including network latencies by CAN arbitration mechanisms is proposed, and an analytical compensation method of control parameters based on the system model is proposed for the network latencies. For the practical implementation of the control, global synchronization is adopted for controller to measure network latencies and to utilize them for the compensation of the control parameters. Simulation results are shown with practical tunnel data response. The proposed method is evaluated to be the most effective for the system through the control performances comparing among a controller not considering network latencies, other two off-line compensation methods, and the proposed method.

네트워크 기반 실시간 제어 시스템을 위한 지연 보상기 개발 (Development of Delay Compensator for Network Based Real-time Control Systems)

  • 김승용;김홍열;김대원
    • 대한전기학회:학술대회논문집
    • /
    • 대한전기학회 2004년도 학술대회 논문집 정보 및 제어부문
    • /
    • pp.82-85
    • /
    • 2004
  • This paper proposes the development of delay compensator to minimize performance degradation caused by time delays in network-based real-time control systems. The delay compensator uses the time-stamp method as a direct delay measuring method to measure time delays generated between network nodes. The delay compensator predicts the network time delays of next period in the views point of time delays and minimizes performance degradation from network through considering predicted time delays. Control output considering network time delays is generated by the defuzzification of probable time delays of next period. The time delays considered in the delay compensator are modeled by using a timed Petri net model. The proposed delay prediction mechanism for the delay compensator is evaluated through some simulation tests by measuring deviation of the predicted delays from simulated delays.

  • PDF

웹 기반 무선 네트워크 실습 애플리케이션 구현 (Implementation of an Application about Wireless Network Practice based on the Web)

  • 이선웅;문일영
    • 한국실천공학교육학회논문지
    • /
    • 제2권1호
    • /
    • pp.71-76
    • /
    • 2010
  • 무선 네트워크를 실습하는 데에는 직접 무선 네트워크 장비를 가지고 하는 방법과 시뮬레이터를 가지고 하는 방법이 있다. 그러나 직접 무선 네트워크 장비를 가지고 하거나 시뮬레이터를 가지고 하는 방법은 실습 공간의 부족함과 장비들이 각각 필요한 점, 그리고 시뮬레이터들은 각 PC에 설치하여 실습을 해야 하는 불편한 점들이 있다. 따라서 본 논문에서는 실제 실습 환경을 모델링 하여 실습 애플리케이션에 적용하고 학생용과 교수용에 맞는 모텔을 보여준다. 또한 웹 기반에서 설치할 필요 없이 무선 네트워크 실습을 할 수 있는 애플리케이션을 구현하는 방법을 제시한다.

  • PDF

A network traffic prediction model of smart substation based on IGSA-WNN

  • Xia, Xin;Liu, Xiaofeng;Lou, Jichao
    • ETRI Journal
    • /
    • 제42권3호
    • /
    • pp.366-375
    • /
    • 2020
  • The network traffic prediction of a smart substation is key in strengthening its system security protection. To improve the performance of its traffic prediction, in this paper, we propose an improved gravitational search algorithm (IGSA), then introduce the IGSA into a wavelet neural network (WNN), iteratively optimize the initial connection weighting, scalability factor, and shift factor, and establish a smart substation network traffic prediction model based on the IGSA-WNN. A comparative analysis of the experimental results shows that the performance of the IGSA-WNN-based prediction model further improves the convergence velocity and prediction accuracy, and that the proposed model solves the deficiency issues of the original WNN, such as slow convergence velocity and ease of falling into a locally optimal solution; thus, it is a better smart substation network traffic prediction model.