• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.8 no.4
• /
• pp.1307-1323
• /
• 2014

With the exhaustion of global IPv4 addresses, IPv6 technologies have attracted increasing attentions, and have been deployed widely. Meanwhile, new applications running over IPv6 networks will change the traditional traffic characteristics obtained from IPv4 networks. Traditional models obtained from IPv4 cannot be used for IPv6 network monitoring directly and there is a need to investigate those changes. In this paper, we explore the flow features of IPv6 traffic and compare its difference with that of IPv4 traffic from flow level. Firstly, we analyze the differences of the general flow statistical characteristics and users' behavior between IPv4 and IPv6 networks. We find that there are more elephant flows in IPv6, which is critical for traffic engineering. Secondly, we find that there exist many one-way flows both in the IPv4 and IPv6 traffic, which are important information sources for abnormal behavior detection. Finally, in light of the challenges of analyzing massive data of large-scale network monitoring, we propose a group flow model which can greatly reduce the number of flows while capturing the primary traffic features, and perform a comparative measurement analysis of group users' behavior dynamic characteristics. We find there are less sharp changes caused by abnormity compared with IPv4, which shows there are less large-scale malicious activities in IPv6 currently. All the evaluation experiments are carried out based on the traffic traces collected from the Northwest Regional Center of CERNET (China Education and Research Network), and the results reveal the detailed flow characteristics of IPv6, which are useful for traffic management and anomaly detection in IPv6.

• Proceedings of the Computational Structural Engineering Institute Conference
• /
• 1996.10a
• /
• pp.131-137
• /
• 1996

To perform condition monitoring of P.C. Box girder bridge under ambient traffic, dynamic characteristics were identified using the results of load test an analysis. It was found that natural frequencies obtained from the measured acceleration data for the forced vibration part and free vibration part were nearly identical. Thus it can be concluded that dynamic parameters are properly determined under ambient traffic condition. Finite element model for analysis was calibrated using measured frequencies. Change of dynamic characteristics were predicted through analysis of the established finite element model with anticipated change.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.43 no.9 s.351
• /
• pp.69-79
• /
• 2006

A number of researches on vision-based traffic monitoring system have been carried out. Most of traffic monitoring schemes belong to one of two categories: analyzing of entire traffic scene and examining of local region. However, the proposed methods suffer from severe performance deterioration when applied in different operating conditions because of the loss of robustness. This paper is aimed at surveying various methods proposed and analyzing the advantages and disadvantages of these methods. Also we propose and investigate appropriate approaches to solve the problems in specific applications.

• Convergence Security Journal
• /
• v.16 no.5
• /
• pp.41-48
• /
• 2016

In this paper we propose a new method of security visualization, VisFlow, using traffic flows to solve the problems of existing traffic flows based visualization techniques that were a loss of end-to-end semantics of communication, reflection problem by symmetrical address coordinates space, and intuitive loss problem in mass of traffic. VisFlow, a simple and effective security visualization interface, can do a real-time analysis and monitoring the situation in the managed network with visualizing a variety of network behavior not seen in the individual traffic data that can be shaped into patterns. This is a way to increase the intuitiveness and usability by identifying the role of nodes and by visualizing the highlighted or simplified information based on their importance in 2D/3D space. In addition, it monitor the network security situation as a way to increase the informational effectively using the asymmetrical connecting line based on IP addresses between pairs of nodes. Administrator can do a real-time analysis and monitoring the situation in the managed network using VisFlow, it makes to effectively investigate the massive traffic data and is easy to intuitively understand the entire network situation.

• Journal of Environmental Science International
• /
• v.15 no.8
• /
• pp.737-744
• /
• 2006

Present study was designed to characterize the concentrations of major roadside air pollutants in Daegu and to compare with those of Seoul and Busan. Evaluated were the exceedance frequence of mean concentrations of target compounds(CO, NO$_2$, O$_3$, PM$_{10}$, SO$_2$) and the relationship for time variation. Two air pollution monitoring stations(one roadside station and one residential station) in Daegu were selected for this study. In addition, one roadside monitoring station from each of Seoul and Busan was chosen for the comparison of Daegu monitoring stations. The data analyzed in the current study were collected from 1998 to 2000 by Daegu Regional Environmental Management Office. The roadside concentrations of NO2 and PM to and the exceedance frequency of ambient air standard levels in Daegu were higher than those of Seoul and Busan. Except 03, the roadside concentrations of all target compounds showed following three distinguished patterns; first, possibly due to increased traffic density, the concentrations increased from 0500 to 0900(LST), second, the concentrations decreased from 0900 to 1700(LST) possibly due to the increased wind velocity and decreased traffic density, and finally, increased traffic density, the concentrations increased again from 1700 to 2100(LST). An implication was that major air pollution sources shifted from residential area to road-area during rush hours.

• International Journal of Concrete Structures and Materials
• /
• v.2 no.2
• /
• pp.91-98
• /
• 2008

Curved bridges are important components of a highway transportation network for connecting local roads and highways, but very few data have been collected in terms of their field performance. This paper presents two-years monitoring and system identification results of a curved concrete box-girder bridge, the West St. On-Ramp, under ambient traffic excitations. The authors permanently installed accelerometers on the bridge from the beginning of the bridge life. From the ambient vibration data sets collected over the two years, the element stiffness correction factors for the columns, the girder, and boundary springs were identified using the back-propagation neural network. The results showed that the element stiffness values were nearly 10% different from the initial design values. It was also observed that the traffic conditions heavily influence the dynamic characteristics of this curved bridge. Furthermore, a probability distribution model of the element stiffness was established for long-term monitoring and analysis of the bridge stiffness change.

• Journal of IKEEE
• /
• v.13 no.2
• /
• pp.140-149
• /
• 2009

Traffic anomaly detection is one of important technology that should be considered in network security and administration. In this paper, we propose an abnormal traffic detection mechanism that includes traffic monitoring and traffic analysis. We develop analytical passive monitoring system called WISE-Mon which can inspect traffic behavior. We establish a criterion by analyzing the characteristics of a traffic training set. To detect abnormal traffic, we derive a hyperplane by using Fisher linear discriminant and chi-square distribution as well as the analyzed characteristics of traffic. Our mechanism can support reliable results for traffic anomaly detection and is compatible to real-time detection. In addition, since the trend of traffic can be changed as time passes, the hyperplane has to be updated periodically to reflect the changes. Accordingly, we consider the self-learning algorithm which reflects the trend of the traffic and so enables to increase the pliability of detection probability. Numerical results are presented to validate the accuracy of proposed mechanism. It shows that the proposed mechanism is reliable and relevant for traffic anomaly detection.

• International Journal of Highway Engineering
• /
• v.17 no.4
• /
• pp.135-141
• /
• 2015

PURPOSES: This study has been conducted to determine a homogeneous segment and integration to improve the efficiency of short-term traffic count. We have also attempted to reduce the traffic monitoring budget. METHODS: Based on the statistical approach, a homogeneous segment in the same road section is determined. Statistical analysis using t-test, mean difference, and correlation coefficient are carried out for 10-year-long (2004-2013) short-term count traffic data and the MAPE of fresh data (2014) are evaluated. The correlation coefficient represents a trend in traffic count, while the mean difference and t-score represent an average traffic count. RESULTS : The statistical analysis suggests that the number of target segments varies with the criteria. The correlation coefficient of more than 30% of the adjacent segment is higher than 0.8. A mean difference of 36.2% and t-score of 19.5% for adjacent segments are below 20% and 2.8, respectively. According to the effectiveness analysis, the integration criteria of the mean difference have a higher effect as compared to the t-score criteria. Thus, the mean difference represents a traffic volume similarity. CONCLUSIONS : The integration of 47 road segments from 882 adjacent road segments indicate 8.87% of MAPE, which is within an acceptable range. It can reduce the traffic monitoring budget and increase the count to improve an accuracy of traffic volume estimation.

• International Journal of Highway Engineering
• /
• v.18 no.3
• /
• pp.109-114
• /
• 2016

PURPOSES : The demand for extending national highways is increasing, but traffic monitoring is hindered because of resource limitations. Hence, this study classified highway segments into 5 types to improve the efficiency of short-term traffic count planning. METHODS : The traffic volume trends of 880 highway segments were classified through R-squared and linear regression analyses; the steadiness of traffic volume trends was evaluated through coefficient of variance (COV), and the normality of the data were determined through the Shapiro-Wilk W-test. RESULTS : Of the 880 segments, 574 segments had relatively low COV and were classified as type 1 segments, and 123 and 64 segments with increasing and decreasing traffic volume trends were classified as type 2 and type 3 segments, respectively; 80 segments that failed the normality test were classified as type 4, and the remaining 39 were classified as type 5 segments. CONCLUSIONS : A theoretical basis for biennial count planning was established. Biennial count is recommended for types 1~4 because their mean absolute percentage errors (MAPEs) are approximately 10%. For type 5 (MAPE =19.26%), the conventional annual count can be continued. The results of this analysis can reduce the traffic monitoring budget.

• Proceedings of the KIEE Conference
• /
• 2006.07a
• /
• pp.179-180
• /
• 2006

The real time monitoring of the power systems covering wide area are essential for the stable operation and control of the power system. Synchronized phasor measurement is a key for the precise monitoring and control of the power systems. In this paper, to suggest an appropriate network topology of Power Infrastructure Defense System(PIDS) and to estimate the maximum network bandwidth with using the network analyzer, we simulate a PIDS and analyze the network traffic.