• Title/Summary/Keyword: Software Defined Networking

Search Result 165, Processing Time 0.031 seconds

분산형 이동성 관리기법의 표준화 동향

  • Kim, Yeong-Han;Seon, Gyeong-Jae
    • Information and Communications Magazine
    • /
    • v.31 no.9
    • /
    • pp.3-8
    • /
    • 2014
  • 본고에서는 분산형 이동성 관리 기법(Distributed Mobility Management, DMM)에 대한 표준화 연구 동향 및 이를 통한 모바일 네트워크에서의 적용 방안에 대한 연구 동향을 소개한다. 특히, 국제 표준화 단체인 IETF에서 논의되고 있는 분산형 이동성 관리 기법의 방향과 함께 최근 활발하게 논의되는 소프트웨어 정의 네트워크(Software-Defined Networking, SDN) 및 네트워크 기능 가상화(Network Function Virtualization, NFV)기술과의 접목을 통한 연구들을 소개하고 다양한 기술의 접목에 따른 이슈들을 분석한다.

Technology Trends of SDN, NFV, and Cloud (SDN/NFV/Cloud 동향)

  • Lee, B.C.;Yang, S.H.;Lee, B.S.
    • Electronics and Telecommunications Trends
    • /
    • v.30 no.1
    • /
    • pp.87-93
    • /
    • 2015
  • 본고에서는 SDN(Software Defined Networking)/NFV(Network Function Virtualization)/Cloud 기술 현황 및 SDN/NFV/Cloud 표준화 현황을 바탕으로 통합적인 측면에서 SDN/NFV/Cloud 기술을 전망한다. SDN/NFV/Cloud는 응용/서비스에 따라 ICT 인프라가 제어 및 관리할 수 있게 하여 새로운 지식 기반 서비스 및 솔루션을 창출하는 핵심 기술임을 설명한다. SDN, NFV 및 Cloud 기술을 연계 분석하여 SDN/NFV/Cloud 개별 및 융합 기술 진화방향을 전망한다. 끝으로 SDN/NFV/Cloud 기술개발 가속화, 융합 기술 확산 및 효과에 대해서 예측한다.

  • PDF

미래 네트워크의 새로운 패러다임 SDN/NFV에 대하여

  • Baek, Sang-Heon;Jang, In-Seon;Seo, Dong-Eun;Lee, Jong-Hwa
    • Information and Communications Magazine
    • /
    • v.32 no.7
    • /
    • pp.82-92
    • /
    • 2015
  • 소프트웨어 정의 네트워킹 (Software-Defined Networking: SDN)과 네트워크 기능 가상화 (Network Function Virtualization: NFV) 기술은 네트워크 산업 전반에 걸쳐 가장 중요한 기술/트렌드로 인식되고 있다. 현재 국내외 주요 기업들이 앞다투어 기술 개발을 추진하고 있으며 이를 실제 상용망에 적용하고자 하는 움직임도 활발히 진행되고 있다. 본 고에서는 유사하면서도 다른 SDN과 NFV의 개념을 명확히 살펴보고자 한다. SDN과 NFV의 역사, 핵심 기술, 활용 분야, 그리고 향후 연구 이슈를 폭넓게 제시한다.

SDN 표준 참조구조 기반의 개방형 인터페이스, 추상화 기술 및 컨트롤러 언어 분석

  • Sin, Myeong-Gi;Nam, Gi-Hyeok;Choe, Yun-Cheol;Kim, Hyeong-Jun
    • Information and Communications Magazine
    • /
    • v.30 no.2
    • /
    • pp.36-42
    • /
    • 2013
  • 본 고에서는 최근 활발히 연구되고 있는 SDN (Software-Defined Networking) 기술과 관련하여 다양한 SDN의 정의와 개념을 포괄하는 표준 참조 구조 (Reference Architecture)를 제안하고, 이를 기반으로 대표적인 표준화 대상인 개방형 인터페이스, SDN 스위치 추상화와 컨트롤러 응용 언어 기술에 대해 논의한다.

Security in Network Virtualization: A Survey

  • Jee, Seung Hun;Park, Ji Su;Shon, Jin Gon
    • Journal of Information Processing Systems
    • /
    • v.17 no.4
    • /
    • pp.801-817
    • /
    • 2021
  • Network virtualization technologies have played efficient roles in deploying cloud, Internet of Things (IoT), big data, and 5G network. We have conducted a survey on network virtualization technologies, such as software-defined networking (SDN), network functions virtualization (NFV), and network virtualization overlay (NVO). For each of technologies, we have explained the comprehensive architectures, applied technologies, and the advantages and disadvantages. Furthermore, this paper has provided a summarized view of the latest research works on challenges and solutions of security issues mainly focused on DDoS attack and encryption.

DoS Attack Defense Using SDN and Honeypot (SDN 과 Honeypot 을 활용한 DoS 공격 차단 기법)

  • Mun, Sungsik;Kim, Mihui
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2020.11a
    • /
    • pp.397-400
    • /
    • 2020
  • SDN(Software Defined Networking)은 효율적인 방법과 저렴한 비용으로 네트워크를 직접 프로그램 하여 즉각적인 제어를 할 수 있다. 본 논문에서는 SDN 의 특성을 활용, SDN 구성요소인 컨트롤러와 스위치를 활용하여 공격 정보를 수집하고 이를 기반으로 공격을 탐지하는 위협 레벨 관리 모듈, 공격 탐지 모듈, 패킷 통계 모듈 등을 설계하여 프로그래밍하고 허니팟을 적용하여 서비스 거부(DoS, Denial of Services)공격을 차단하는 방법을 제시한다.

Polymorphic Path Transferring for Secure Flow Delivery

  • Zhang, Rongbo;Li, Xin;Zhan, Yan
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.15 no.8
    • /
    • pp.2805-2826
    • /
    • 2021
  • In most cases, the routing policy of networks shows a preference for a static one-to-one mapping of communication pairs to routing paths, which offers adversaries a great advantage to conduct thorough reconnaissance and organize an effective attack in a stress-free manner. With the evolution of network intelligence, some flexible and adaptive routing policies have already proposed to intensify the network defender to turn the situation. Routing mutation is an effective strategy that can invalidate the unvarying nature of routing information that attackers have collected from exploiting the static configuration of the network. However, three constraints execute press on routing mutation deployment in practical: insufficient route mutation space, expensive control costs, and incompatibility. To enhance the availability of route mutation, we propose an OpenFlow-based route mutation technique called Polymorphic Path Transferring (PPT), which adopts a physical and virtual path segment mixed construction technique to enlarge the routing path space for elevating the security of communication. Based on the Markov Decision Process, with considering flows distribution in the network, the PPT adopts an evolution routing path scheduling algorithm with a segment path update strategy, which relieves the press on the overhead of control and incompatibility. Our analysis demonstrates that PPT can secure data delivery in the worst network environment while countering sophisticated attacks in an evasion-free manner (e.g., advanced persistent threat). Case study and experiment results show its effectiveness in proactively defending against targeted attacks and its advantage compared with previous route mutation methods.

Effective Contents Delivery System Using Service Adaptive Network Architecture(SaNA) (Service adaptive Network Architecture(SaNA)을 활용한 콘텐츠 전송 시스템)

  • Kong, Seok-Hwan;Lee, Jai-Yong
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.39B no.6
    • /
    • pp.406-413
    • /
    • 2014
  • In recent years, various contents traffics are increasing according to the various internet connectable devices which have become contents provider. Because these contents traffics show different pattern from previous one, many researches for efficient contents delivery system are in progress. CCN(Contents Centric Network), one of the representative research subject, has inter operation problem with a current network because it has clean-state architecture. In this point of view, this paper suggests the SaNA(Service adaptive Network Architecture) for efficient contents delivery when it inter operates with current network architecture. SaNA is a convergence system which can be gradually applied to current network using CCN and SDN(Software Defined Network) which are core future internet technologies. Appling this system on the contents delivery service, it can increase the network bandwidth utilization by two times and decrease the contents delivery time by 1.7 times.

An Optimized Deployment Mechanism for Virtual Middleboxes in NFV- and SDN-Enabling Network

  • Xiong, Gang;Sun, Penghao;Hu, Yuxiang;Lan, Julong;Li, Kan
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.10 no.8
    • /
    • pp.3474-3497
    • /
    • 2016
  • Network Function Virtualization (NFV) and Software Defined Networking (SDN) are recently considered as very promising drivers of the evolution of existing middlebox services, which play intrinsic and fundamental roles in today's networks. To address the virtual service deployment issues that caused by introducing NFV or SDN to networks, this paper proposes an optimal solution by combining quantum genetic algorithm with cooperative game theory. Specifically, we first state the concrete content of the service deployment problem and describe the system framework based on the architecture of SDN. Second, for the service location placement sub-problem, an integer linear programming model is built, which aims at minimizing the network transport delay by selecting suitable service locations, and then a heuristic solution is designed based on the improved quantum genetic algorithm. Third, for the service amount placement sub-problem, we apply the rigorous cooperative game-theoretic approach to build the mathematical model, and implement a distributed algorithm corresponding to Nash bargaining solution. Finally, experimental results show that our proposed method can calculate automatically the optimized placement locations, which reduces 30% of the average traffic delay compared to that of the random placement scheme. Meanwhile, the service amount placement approach can achieve the performance that the average metric values of satisfaction degree and fairness index reach above 90%. And evaluation results demonstrate that our proposed mechanism has a comprehensive advantage for network application.

Performance Analysis and Optimization of OpenDaylight Controller in Distributed Cluster Environment (분산 클러스터 환경에서 오픈데이라이트 컨트롤러 성능 분석 및 최적화)

  • Lee, Solyi;Kim, Taehong;Kim, Taejoon
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.6 no.11
    • /
    • pp.453-462
    • /
    • 2017
  • OpenDaylight is an SDN (Software Defined Networking) open source framework, which is popular in network fields recently. This paper analyzes the performance of a controller cluster architecture by focusing on distributed datastore and Raft leader election algorithm. In addition, we propose an enhanced version of Raft algorithm in order to improve the performance of distributed datastore by distributing shard leaders over controller cluster. This paper compares the conventional Raft algorithm with the proposed version of the Raft algorithm. Moreover, we compare the performance of distributed datastore according to shard roles such as leader and follower. Experimental results show that Shard leaders provide better performance than followers and Shard updating requests need to be distributed over multiple controllers. So, by using proposed version of Raft algorithm, controller performance can be improved. The details of the experiment results are cleary described.