• Title/Summary/Keyword: Outbound Traffic

Search Result 32, Processing Time 0.027 seconds

Multi-level detection method for DRDoS attack (DRDoS 공격에 대한 다단계 탐지 기법)

  • Baik, Nam-Kyun
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.24 no.12
    • /
    • pp.1670-1675
    • /
    • 2020
  • In this study, to provide the basis for establishing effective network based countermeasures against DRDoS(Distributed Reflection Denial of Service) attacks, we propose a new 'DRDoS attack multi-level detection method' that identifies the network based characteristics of DRDoS and applies probability and statistical techniques. The proposed method removes the limit to which normal traffic can be indiscriminately blocked by unlimited competition in network bandwidth by amplification of reflectors, which is characteristic of DRDoS. This means that by comparing 'Server to Server' and 'Outbound Session Incremental' for it, accurate DRDoS identification and detection is possible and only statistical and probabilistic thresholds are applied to traffic. Thus, network-based information security systems can take advantage of this to completely eliminate DRDoS attack frames. Therefore, it is expected that this study will contribute greatly to identifying and responding to DRDoS attacks.

Analysis on the Marine Traffic Flow Characteristics for Gamcheon Harbor (감천항 해역에 대한 해상교통특성 분석)

  • Kim Jun-Hoon;Gug Seung-Gi
    • Journal of Navigation and Port Research
    • /
    • v.30 no.5 s.111
    • /
    • pp.397-404
    • /
    • 2006
  • Gamcheon harbor was developed as a multipurpose port to mix processing functions of exclusive piers for bulk cargo such as marine products, domestic cargoes. Since the container terminal was opened in 1997, maximum $40,000\sim50,000$ DWT containership have been incoming and outgoing. However, bemuse the breakwater entrance in Gamcheon harbor is narrow and the crossed vessels are ever-present at breakwater front, marine accident danger is high that grasping traffic characteristics is required in reply. Therefore marine traffic characteristics were analyzed for Gamcheon harbor and Gamcheon approaching waters, included the track and traffic volumes of peak hours period in inbound/outbound and front sea area of the harbor in present.

Analysis on the Marine Traffic Flow Characteristics for Gamcheon Harbor (감천항 입.출항에 관한 해상교통특성 분석)

  • Kim Jun-Hoon;Gug Seung-Gi
    • Proceedings of the Korean Institute of Navigation and Port Research Conference
    • /
    • 2006.06b
    • /
    • pp.137-146
    • /
    • 2006
  • Gamcheon Harbor was developed as a multipurpose port to mix processing functions of exclusive piers for bulk cargo such as marine products. domestic cargo. Since the container terminal was opened in 1997. maximum $40,000{\sim}50,000$ DWT containership have been incoming and outgoing. However, because [he breakwater entrance in Gamcheon Harbor is narrow and the crossed passing of ship is ever-present at breakwater front, marine accident danger is high that grasping traffic characteristics is required in reply. Therefore marine traffic characteristics were analyzed for Gamcheon Harbor, included the track and traffic volumes of peak hours period in inbound/outbound and front sea area of the harbor in present.

  • PDF

Capacity Analysis in the Ramp Junction of the Urban Freeway Connected with the Busan Port (부산항과 연계된 도시고속도로의 연결로 접속부내 용량특성분석에 관한 연구)

  • Kim, Tae Gon;Jeong, Young Hwan;Park, Jong Man;Ji, Seung Keun
    • KSCE Journal of Civil and Environmental Engineering Research
    • /
    • v.28 no.2D
    • /
    • pp.205-216
    • /
    • 2008
  • Urban freeway is defined as the roadway with 4 lanes or more which requires a high design criteria for handling a large capacity of vehicles rapidly as a high-speed exclusive roadway in the city. However, most of the urban freeways suffer from severe traffic congestion due to the increased traffic exceeding their capacities regardless of the morning and afternoon rushhours or the inbound and outbound directions. The purpose in this study is to collect and investigate the real-time traffic characteristics based on the ramp junction influence areas of the urban freeway connected with the Busan port, compare and analyze the traffic characteristic relationship for each lane within the ramp junction influence areas, and finally assess and suggest the optimal capacity for each lane within the ramp junction influence areas.

A Study on the estimation of traffic congestion for Pyeongtaek·Dangjin port development (평택·당진항의 내항개발에 따른 교통혼잡도 평가에 관한 연구)

  • Gug Seung-Gi;Kim Se-Won;Kim Jung-Hoon
    • Journal of Navigation and Port Research
    • /
    • v.29 no.6 s.102
    • /
    • pp.481-485
    • /
    • 2005
  • The port entry system of the inner harbor in Pyeongtaek${\cdot}$Dangjin was planned as lock-gate in 'Master plan project on port planning in Asan industry base(1990)‘, but was changed to tidal harbor in 'Project maintaining Master plan for comprehensive development of Pyeongtaek${\cdot}$Dangjin port(2001)'. Accordingly, southern sea bank constructed under the lower part of Seohae-bridge will be removed so that inbound/outbound vessels for the inner harbor can navigate at all times. However, in the view of the safety on passing through the lower of Seohae-bridge, navigating conditions for the inner harbor will be restricted in the single-way of 50,000 DWT vessel and the two-way of vessel less than 30,000 DWT Therefore, this study carried out the estimation of traffic congestion arising from these vessels with above restrictions q[ter supposing annual inbound/outbound vessel's numbers for loading and unloading cargo surveyed on the inner harbor.

A Study on the Optimal Probability Distribution for the Time Interval Between Ships on the Traffic Route of the Busan North Port (부산 북항 통항 선박간의 시간간격 최적 확률분포에 관한 연구)

  • Kim, Jong-Kwan
    • Journal of Navigation and Port Research
    • /
    • v.43 no.6
    • /
    • pp.413-419
    • /
    • 2019
  • Traffic routes typically have heavy traffic. Especially, the entrance of the route has a high risk of accidents occurring because of ships entering and exiting the port. However, almost of studies have focused on the distribution of traffic on the route. Thus, studies on the distribution between ships for passing through the route are insufficient. The purpose of this study was to analysis the traffic in the Busan north port No.1 route for one week. Based on present traffic conditions, one gate line was settled on the route with an analysis of traffic conditions. Based on the analysis data, each optimal time probability distribution between ships was divided into inbound/outbound and traffic volume. An analysis of the optimal probability distribution, was applied to 31 probability distributions divided into bounded, unbounded, non-negative, and advanced probability distribution. The KS test was applied for identifying three major optimal time probability distributions. According to the KS test results, the Wakeby distribution is the best optimal time probability distribution on the designated route. Although the optimal time probability distribution for other transportation studies such as on vehicles on highways is a non-negative probability distribution, this distribution is an advanced probability distribution. Thus, the application of major probability distribution for using other transportation studies is not applicable to this study Additionally, the distance between ships in actual traffic surveys and the distance estimated by the optimal probability distribution were compared. As a result of the comparison, those distances were fairly similar. However, this study was conducted in only one major port. Thus, it is necessary to investigate the time between ships and calculate a traffic volume on varying routes in future studies.

A Study on the Route Operation & Safety Improvement in Gwangyang Traffic Safety Designated Area Based on ES Model (ES모델을 통한 광양항 교통안전특정해역의 항로운영과 안전성 향상에 관한 연구)

  • Kim, Deug-Bong;Park, Young-Soo
    • Journal of the Korean Society of Marine Environment & Safety
    • /
    • v.22 no.2
    • /
    • pp.153-159
    • /
    • 2016
  • Gwangyang traffic safety designated area is composed of 3 fairways (Deep water fairway, inbound fairway, and outbound fairway). However, inbound vessels can't use this passage because of Samyeo rock and artificial fishing banks in inbound route. The problem with the rocks and artificial fishing banks has been raised by ship navigators and authorities of the port. This research is about the safety evaluation and management plan of the passage, and we conducted maritime traffic simulation using a model based on a ship operator risks. As a result, assuming that future marine traffic volume is the same as the present, and if the ship operators use 3 fairways and not two, it showed risk reduction of 46.4 % (vessels over 50,000 DWT using DW route) and 57.1 % (vessels over 10,000 DWT using DW route). Also, in a traffic volume condition which is the same as the present, to induce vessels over 50,000 DWT to use DW route is effective in mitigating of risks. Meanwhile, in a condition which increased the traffic volume by 150 %, it is more effective to induce vessels to use DW route. This research is the result of analysis using the model based on ship operator risks, and not cost-effectiveness analysis on the removal of Samyeo rock and artifical fishing banks. This research is expected to be used on setting up the sea route and management plan (particularly, restriction on passing DW route).

Analysis of Traffic and Attack Frequency in the NURION Supercomputing Service Network (누리온 슈퍼컴퓨팅서비스 네트워크에서 트래픽 및 공격 빈도 분석)

  • Lee, Jae-Kook;Kim, Sung-Jun;Hong, Taeyoung
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.9 no.5
    • /
    • pp.113-120
    • /
    • 2020
  • KISTI(Korea Institute of Science and Technology Information) provides HPC(High Performance Computing) service to users of university, institute, government, affiliated organization, company and so on. The NURION, supercomputer that launched its official service on Jan. 1, 2019, is the fifth supercomputer established by the KISTI. The NURION has 25.7 petaflops computation performance. Understanding how supercomputing services are used and how researchers are using is critical to system operators and managers. It is central to monitor and analysis network traffic. In this paper, we briefly introduce the NURION system and supercomputing service network with security configuration. And we describe the monitoring system that checks the status of supercomputing services in real time. We analyze inbound/outbound traffics and abnormal (attack) IP addresses data that are collected in the NURION supercomputing service network for 11 months (from January to November 1919) using time series and correlation analysis method.

A Study on Evaluation of Harbor VTS Operators' Workload by the Analysis of Marine Traffic (교통량 분석을 통한 항만 VTS 관제사의 업무량 평가)

  • Park, Sung-Yong;Park, Jin-Soo;Kang, Jung-Gu;Park, Young-Soo
    • Journal of Navigation and Port Research
    • /
    • v.32 no.8
    • /
    • pp.569-576
    • /
    • 2008
  • By the development of international trade in last decades, Korean International Trade has been grown rapidly and Korean Port and Port facilities have been improved stimultaneously: finally volume of the marine traffic increased rapidly. Presently, 15 VTS centers have serving in Korean waters and since the introduction of the first VIS Center in Korea there is no quantitative analysis to find workload of VIS operator. After that Port-MIS and De-brief data have been gathered for 7 days and inbound-outbound vessels time-g/t table prepared and traffic volume examined for each V1S center. Hence $L^2$ conversion traffic volume and dangerous vessel ratio obtained Later on conversion controlled number obtained by denoting ratio 1.0 to directly controlled vessels by VTSO and denoting ratio 0.3 to indirectly controlled vessels by VTSO. Traffic volume, large vessel ratio, dangerous vessel ratio, dimension of VTS controlled area, marine accident occurrence frequency and communication volume of comm. log can be counted as a factor which influence to workload of VTSO. All those factors have been examined and analyzed. Finally, ship's size and dangerous vessel ratio have been chosen to derive the Number of composite conversion control for workload formula.

Flow-based Anomaly Detection Using Access Behavior Profiling and Time-sequenced Relation Mining

  • Liu, Weixin;Zheng, Kangfeng;Wu, Bin;Wu, Chunhua;Niu, Xinxin
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.10 no.6
    • /
    • pp.2781-2800
    • /
    • 2016
  • Emerging attacks aim to access proprietary assets and steal data for business or political motives, such as Operation Aurora and Operation Shady RAT. Skilled Intruders would likely remove their traces on targeted hosts, but their network movements, which are continuously recorded by network devices, cannot be easily eliminated by themselves. However, without complete knowledge about both inbound/outbound and internal traffic, it is difficult for security team to unveil hidden traces of intruders. In this paper, we propose an autonomous anomaly detection system based on behavior profiling and relation mining. The single-hop access profiling model employ a novel linear grouping algorithm PSOLGA to create behavior profiles for each individual server application discovered automatically in historical flow analysis. Besides that, the double-hop access relation model utilizes in-memory graph to mine time-sequenced access relations between different server applications. Using the behavior profiles and relation rules, this approach is able to detect possible anomalies and violations in real-time detection. Finally, the experimental results demonstrate that the designed models are promising in terms of accuracy and computational efficiency.