• Title/Summary/Keyword: Traffic control agent

Search Result 51, Processing Time 0.026 seconds

The Detection System for Hosts infected Malware through Behavior information of NAC post-connect (NAC 의 post-connect에서 행위정보를 사용한 악성코드 감염 호스트 탐지 시스템)

  • Han, Myung-Mook;Sun, Jong-Hyun
    • The Journal of Korean Association of Computer Education
    • /
    • v.13 no.6
    • /
    • pp.91-98
    • /
    • 2010
  • NAC(Network Access Control) has been developed as a solution for the security of end-point user, to be a target computer of worm attack which does not use security patch of OS and install Anti-Virus, which spreads the viruses in the Intra-net. Currently the NAC products in market have a sufficient technology of pre-connect, but insufficient one of post-connect which detects the threats after the connect through regular authentication. Therefore NAC users have been suffered from Zero-day attacks and malware infection. In this paper, to solve the problems in the post-connect step we generate the normal behavior profiles using the traffic information of each host, host information through agent, information of open port and network configuration modification through network scanner addition to authentication of host and inspection of policy violation used before. Based on these we propose the system to detect the hosts infected malware.

  • PDF

An Adaptive Load Control Scheme in Hierarchical Mobile IPv6 Networks (계층적 모바일 IP 망에서의 적응형 부하 제어 기법)

  • Pack Sang heon;Kwon Tae kyoung;Choi Yang hee
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.29 no.10A
    • /
    • pp.1131-1138
    • /
    • 2004
  • In Hierarchical Mobile Ipv6 (HMIPv6) networks, the mobility anchor point (MAP) handles binding update (BU) procedures locally to reduce signaling overhead for mobility. However, as the number of mobile nodes (MNs) handled by the MAP increases, the MAP suffers from the overhead not only to handle signaling traffic but also to Process data tunneling traffic. Therefore, it is important to control the number of MNs serviced by the MAP, in order to mitigate the burden of the MAP. We propose an adaptive load control scheme, which consists of two sub-algorithms: threshold-based admission control algorithm and session-to-mobility ratio (SMR) based replacement algorithm. When the number of MNs at a MAP reaches to the full capacity, the MAP replaces an existing MN at the MAP, whose SMR is high, with an MN that just requests binding update. The replaced MN is redirected to its home agent. We analyze the proposed load control scheme using the .Markov chain model in terms of the new MN and the ongoing MN blocking probabilities. Numerical results indicate that the above probabilities are lowered significantly compared to the threshold-based admission control alone.

Inter-Domain Mobility Management Based on the Proxy Mobile IP in Mobile Networks

  • Gohar, Moneeb;Koh, Seok-Joo
    • Journal of Information Processing Systems
    • /
    • v.12 no.2
    • /
    • pp.196-213
    • /
    • 2016
  • System Architecture Evolution (SAE) with Long Term Evolution (LTE) has been used as the key technology for the next generation mobile networks. To support mobility in the LTE/SAE-based mobile networks, the Proxy Mobile IPv6 (PMIP), in which the Mobile Access Gateway (MAG) of the PMIP is deployed at the Serving Gateway (S-GW) of LTE/SAE and the Local Mobility Anchor (LMA) of PMIP is employed at the PDN Gateway (P-GW) of LTE/SAE, is being considered. In the meantime, the Host Identity Protocol (HIP) and the Locator Identifier Separation Protocol (LISP) have recently been proposed with the identifier-locator separation principle, and they can be used for mobility management over the global-scale networks. In this paper, we discuss how to provide the inter-domain mobility management over PMIP-based LTE/SAE networks by investigating three possible scenarios: mobile IP with PMIP (denoted by MIP-PMIP-LTE/SAE), HIP with PMIP (denoted by HIP-PMIP-LTE/SAE), and LISP with PMIP (denoted by LISP-PMIP-LTE/SAE). For performance analysis of the candidate inter-domain mobility management schemes, we analyzed the traffic overhead at a central agent and the total transmission delay required for control and data packet delivery. From the numerical results, we can see that HIP-PMIP-LTE/SAE and LISP-PMIP-LTE/SAE are preferred to MIP-PMIP-LTE/SAE in terms of traffic overhead; whereas, LISP-PMIP-LTE/SAE is preferred to HIP-PMIP-LTE/SAE and MIP-PMIP-LTE/SAE in the viewpoint of total transmission delay.

Development of an Intelligent Software Programmable Logic Controller for IEC1131-3 International Standard Languages (IEC1131-3 표준언어 처리를 위한 지능적 소프트웨어 PLC 개발)

  • Cho, Young-Im
    • Journal of the Korean Institute of Intelligent Systems
    • /
    • v.14 no.2
    • /
    • pp.207-215
    • /
    • 2004
  • The PLC programming by IEC1131-3 is hard to handle to ordinary users as well as professionals. Also it has not a generality, so that it couldn't be debugging some logic errors easily. In order to be adapted for such environment, In this paper, I have developed the ISPLC(Intelligent Agent System based Software Programmable Logic Controller). In ISPLC system, LD programmed by a user is converted to the C code which can be used in a commercial editor such as Visual C++. The detection of logical errors in C code is more effective than PLC programming itself. ISPLC provides the GUI-based interface in web environment and an easy programming platform to such beginners as well as professionals. The study of code conversion of LD to IL as well as IL to C is firstly tried in the world as well as KOREA. To show the effectiveness of the developed system, I applied it to a practical case, a real time traffic control system. ISPLC is minimized the error debugging and programming time owing to be supported by windows application programs.

Agent-Based COVID-19 Simulation Considering Dynamic Movement: Changes of Infections According to Detect Levels (동적 움직임 변화를 반영한 에이전트 기반 코로나-19 시뮬레이션: 접촉자 발견 수준에 따른 감염 변화)

  • Lee, Jongsung
    • Journal of the Korea Society for Simulation
    • /
    • v.30 no.1
    • /
    • pp.43-54
    • /
    • 2021
  • Since COVID-19 (Severe acute respiratory syndrome coronavirus type 2, SARS-Cov-2) was first discovered at the end of 2019, it has spread rapidly around the world. This study introduces an agent-based simulation model representing COVID-19 spread in South Korea to investigate the effect of detect level (contact tracing) on the virus spread. To develop the model, related data are aggregated and probability distributions are inferred based on the data. The entire process of infection, quarantine, recovery, and death is schematically described and the interaction of people is modeled based on the traffic data. A composite logistic functions are utilized to represent the compliance of people to the government move control such as social distancing. To demonstrate to effect of detect level on the virus spread, detect level is changed from 0% to 100%. The results indicate active contact tracing inhibits the virus spread and the inhibitory effect increases geometrically as the detect level increases.

A Ring-based Multicast Routing Architecture for Mobile Ad Hoc Networks (모바일 애드혹 네트워크를 위한 링 기반 멀티캐스트 라우팅 구조)

  • Heo Joon;Hong Choong Seon;Yang Yubai
    • The KIPS Transactions:PartC
    • /
    • v.11C no.7 s.96
    • /
    • pp.895-904
    • /
    • 2004
  • Due to the frequent and unpredictable topology changes, multicast still remains as challenge and no one-size-fits-all protocol could serve all kinds of needs in mobile ad hoc network. In this paper, we propose a novel scheme of Hierarchical Eulerian Ring Oriented Multicast Architecture (HEROMA) over mobile ad hoc network. It has features that concentrate on efficiency and robustness simultaneously. It is also an application-driven proposal for hazard detection. Architectures including Eulerian ring, hierarchy and multicast agent are investigated in detail Simulation results different level of improvements on control traffic, end-to-end delay and packet delivery ratio by comparing with tree-based and mesh-based multicast protocols.

A Handoff Mechanism to Avoid Congestion in Wireless Cells (무선 셀에서의 혼잡 발생을 피하는 핸드오프 방안)

  • 변해선;이미정
    • Journal of KIISE:Information Networking
    • /
    • v.30 no.5
    • /
    • pp.595-603
    • /
    • 2003
  • To provide mobile nodes with continuous communication services, it is important to reduce the packet losses during handoffs. The handoffs of mobile nodes cause packet losses and decrease of TCP throughput on account of a variety of factors. One of those is the congestion in the new cell. Due to the congestion, not only the node moving into the cell but also the already existing nodes that were successfully communicating in the cell suffer the performance degradation. In this paper we propose a new handoff mechanism called‘packet freeze control’, which avoids the congestion caused by handoffs by regulating the influx of traffic burst into the new cell. Packet freeze control is applicable to a wireless network domain in which FAs(Foreign Agents) are connected hierarchically and constitute a logical tree. It gradually increases the number of packets transferred to the new cell by buffering packets in the FAs on the packet delivery path over the wireless network domain. The simulation results show that the proposed mechanism not only reduces the packet losses but also enhances the TCP throughput of other mobile nodes in the cell.

Filtering and Intrusion Detection Approach for Secured Reconfigurable Mobile Systems

  • Idriss, Rim;Loukil, Adlen;Khalgui, Mohamed;Li, Zhiwu;Al-Ahmari, Abdulrahman
    • Journal of Electrical Engineering and Technology
    • /
    • v.12 no.5
    • /
    • pp.2051-2066
    • /
    • 2017
  • This paper deals with reconfigurable secured mobile systems where the reconfigurability has the potential of providing a required adaptability to change the system requirements. The reconfiguration scenario is presented as a run-time automatic operation which allows security mechanisms and the addition-removal-update of software tasks. In particular, there is a definite requirement for filtering and intrusion detection mechanisms that will use fewer resources and also that will improve the security on the secured mobile devices. Filtering methods are used to control incoming traffic and messages, whereas, detection methods are used to detect malware events. Nevertheless, when different reconfiguration scenarios are applied at run-time, new security threats will be emerged against those systems which need to support multiple security objectives: Confidentiality, integrity and availability. We propose in this paper a new approach that efficiently detects threats after reconfigurable scenarios and which is based on filtering and intrusion detection methods. The paper's contribution is applied to Android where the evaluation results demonstrate the effectiveness of the proposed middleware in order to detect the malicious events on reconfigurable secured mobile systems and the feasibility of running and executing such a system with the proposed solutions.

UPnP-based QoSAgent for QoS-guaranteed Streaming Service in Home Networks (서비스 품질이 보장되는 홈 네트워크 스트리밍 전송을 위한 UPnP 기반의 QoSAgent에 대한 연구)

  • Lee Hyun-Ryong;Moon Sung-Tae;Kim Jong-Won;Shin Dong-Yun
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.31 no.5B
    • /
    • pp.430-441
    • /
    • 2006
  • As the various A/V devices and home networks are delivered to users, home networks are changing to an entertainment network. It is expected that the required network bandwidth and the amount of usage of media content in home entertainment networks will be increased. Although the access networks and home networks becoming a high speed network, there remains the problems for QoS-guaranteed media content transfer in home networks. Also, in the home network, there can be network traffic caused by applications like video conferencing, video telephone, and VoIP(voice over IP) as well as inner network traffic of home network. Since media content transfer requires the real-time delivery, it is very important and basic requirement that is to transfer media content to A/V device user wants while keeping the media quality. Even though there are many middleware protocol for home networking, they provide basic device discovery and control or simple functions for QoS-guaranteed media content transfer that are not enough to provide QoS-guaranteed media transfer service that user wants. Thus, in this paper, we propose the technique based on UPnP(universal plug and play) protocol for QoS-guaranteed media content transfer in the home network. The proposed technique is compatible with UPnP and can be used with UPnP as additional functions. In this paper, we utilize VideoLAN application to verify the proposed technique. We add the additional modules that support the proposed technique's function to VideoLAN and we verify the its functions through various test scenarios.

Effect of Beta Glucan on White Blood Cell Counts and Serum Levels of IL-4 and IL-12 in Women with Breast Cancer Undergoing Chemotherapy: A Randomized Double-Blind Placebo-Controlled Clinical Trial

  • Ostadrahimi, Alireza;Ziaei, Jamal Eivazi;Esfahani, Ali;Jafarabadi, Mohammad Asghari;Movassaghpourakbari, Aliakbar;Farrin, Nazila
    • Asian Pacific Journal of Cancer Prevention
    • /
    • v.15 no.14
    • /
    • pp.5733-5739
    • /
    • 2014
  • Background: Breast cancer is the most common female malignancy in the world. Beta glucan can be a hematopoietic and an immune modulator agent in cancer patients. The aim of this trial was to determine the effect of beta glucan on white blood cell counts and serum levels of IL-4 and IL-12 in women with breast cancer undergoing chemotherapy. Materials and Methods: This randomized double-blind placebo-controlled clinical trial was conducted on 30 women with breast carcinoma aged 28-65 years. The eligible participants were randomly assigned to intervention (n=15) or placebo (n=15) groups using a block randomization procedure with matching based on age, course of chemotherapy and menopause status. Patients in the intervention group received two 10-mg capsules of soluble 1-3, 1-6, D-beta glucan daily and the control group receiving placebo during 21 days, the interval between two courses of chemotherapy. White blood cells, neuthrophil, lymphocyte and monocyte counts as well as serum levels of IL-4 and IL-12 were measured at baseline and at the end of the study as primary outcomes of the study. Results: In both groups white blood cell counts decreased after 21 days of the intervention, however in the beta glucan group, WBC was less decreased non significantly than the placebo group. At the end of the study, the change in the serum level of IL-4 in the beta glucan group in comparison with the placebo group was statistically significant (p=0.001). The serum level of IL-12 in the beta glucan group statistically increased (p=0.03) and comparison between two groups at the end of the study was significant after adjusting for baseline values and covariates (p=0.007). Conclusions: The findings suggest that beta glucan can be useful as a complementary or adjuvant therapy and immunomodulary agent in breast cancer patients in combination with cancer therapies, but further studies are needed for confirmation.