• Title/Summary/Keyword: network protection system

Search Result 545, Processing Time 0.03 seconds

Establishment of a secure networking between Secure OSs

  • Lim, Jae-Deok;Yu, Joon-Suk;Kim, Jeong-Nyeo
    • 제어로봇시스템학회:학술대회논문집
    • /
    • 2003.10a
    • /
    • pp.2097-2100
    • /
    • 2003
  • Many studies have been done on secure operating system using secure kernel that has various access control policies for system security. Secure kernel can protect user or system data from unauthorized and/or illegal accesses by applying various access control policies like DAC(Discretionary Access Control), MAC(Mandatory Access Control), RBAC(Role Based Access Control), and so on. But, even if secure operating system is running under various access control policies, network traffic among these secure operating systems can be captured and exposed easily by network monitoring tools like packet sniffer if there is no protection policy for network traffic among secure operating systems. For this reason, protection for data within network traffic is as important as protection for data within local system. In this paper, we propose a secure operating system trusted channel, SOSTC, as a prototype of a simple secure network protocol that can protect network traffic among secure operating systems and can transfer security information of the subject. It is significant that SOSTC can be used to extend a security range of secure operating system to the network environment.

  • PDF

Implementation of a Network Provisioning System with User-driven and Trusty Protection Management

  • Lim, H.
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.9 no.11
    • /
    • pp.4720-4738
    • /
    • 2015
  • Proper management on user-driven virtual circuits (VCs) is essential for seamless operation of virtual networks. The Network Provisioning System (NPS) is useful software for creating user-driven VCs automatically and must take fault management into account for physical layer impairments on user-driven VCs. This paper addresses a user-driven and trusty protection management in an NPS with an open standard Network Service Interface (NSI), as a contribution to show how to implement the user-driven and trusty protection management required for user-driven VCs. In particular, it provides a RESTful web service Interface for Configuration and Event management (RICE) that enable management of a distinguished data and control plane VC status between Network Service Agents (NSAs) in the event of a node or link fault and repair in a domain. This capability represents a contribution to show how network and protection events in a domain can be monitored between NSAs (NPSs with the NSI) in multiple domains. The implemented NPS controls and manages both the primary and backup VC with disjoint path in a user-driven manner. A demonstration to verify RICE API's capability is addressed for the trusty protection in the dynamic VC network.

A Study on the Development of an Agent Communication Module for a Multi-Agent Based Power Distribution Network Protection System Using DNP 3.0 Protocols (DNP3.0 프로토콜을 이용한 배전계통 멀티 에이전트 보호시스템의 통신 모듈 개발에 관한 연구)

  • 최면송;이한웅;민병운;정광호;이승재;현승호
    • The Transactions of the Korean Institute of Electrical Engineers A
    • /
    • v.52 no.9
    • /
    • pp.506-512
    • /
    • 2003
  • In this paper, a communication module between Relay agents in a multi-agent system based power distribution network protection system is realized using DNP3.0(Distributed Network Protocol), which is the standard communication protocol of distribution automation system in KEPCO. The key words for agent communication in the multi-agent based protection system are defined and represented by use of DNP application function code. The communication module developed based on the proposed communication scheme is tested by use of the Communication Test Harness, a test tool for DNP protocol, then used to the multi-agent system based power distribution net work protection system.

Optimization of Air Quality Monitoring Networks in Busan Using a GIS-based Decision Support System (GIS기반 의사결정지원시스템을 이용한 부산 대기질 측정망의 최적화)

  • Yoo, Eun-Chul;Park, Ok-Hyun
    • Journal of Korean Society for Atmospheric Environment
    • /
    • v.23 no.5
    • /
    • pp.526-538
    • /
    • 2007
  • Since air quality monitoring data sets are important base for developing of air quality management strategies including policy making and policy performance assessment, the environmental protection authorities need to organize and operate monitoring network properly. Air quality monitoring network of Busan, consisting of 18 stations, was allocated under unscientific and irrational principles. Thus the current state of air quality monitoring networks was reassessed the effect and appropriateness of monitoring objectives such as population protection and sources surveillance. In the process of the reassessment, a GIS-based decision support system was constructed and used to simulate air quality over complex terrain and to conduct optimization analysis for air quality monitoring network with multi-objective. The maximization of protection capability for population appears to be the most effective and principal objective among various objectives. The relocation of current monitoring stations through optimization analysis of multi-objective appears to be better than the network building for maximization of population protection capability. The decision support system developed in this study on the basis of GIS-based database appear to be useful for the environmental protection authorities to plan and manage air quality monitoring network over complex terrain.

An Autonomous Optimal Coordination Scheme in a Protection System of a Power Distribution Network by using a Multi-Agent Concept

  • Hyun, Seung-Ho;Min, Byung-Woon;Jung, Kwang-Ho;Lee, Seung-Jae;Park, Myeon-Song;Kang, Sang-Hee
    • KIEE International Transactions on Power Engineering
    • /
    • v.2A no.3
    • /
    • pp.89-94
    • /
    • 2002
  • In this paper, a protection system using a Multi-Agent concept for power distribution networks is proposed. Every digital over current relay(OCR) is developed as an agent by adding its own intelligence, self-tuning and communication ability. The main advantage of the Multi-Agent concept is that a group of agents work together to achieve a global goal which is beyond the ability of each individual agent. In order to cope with frequent changes in the network operation condition and faults, an OCR agent, suggested in this paper, is able to detect a fault or a change in the network and find its optimal parameters for protection in an autonomous manner considering information of the whole network obtained by communication between other agents. Through this kind of coordination and information exchanges, not only a local but also a global protective scheme is completed. Simulations in a simple distribution network show the effectiveness of the suggested protection system.

A Study on the Protection of EPON (EPON 장애 대책에 관한 연구)

  • Koo Bon-Jeong;Hur Jeong;Kim Sunghwi;Cho Seong-Dae;Park Youngil
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.29 no.11A
    • /
    • pp.1231-1236
    • /
    • 2004
  • Network protection has been mainly applied to trunk network. PTP, ring, linear, mesh topologies of SONET/SDH system and 565 Mbps PDH systems are among those examples. But, as larger capacity PON system is introduced, protection in access network system also becomes necessary. In this paper, an efficient EPON protection scheme utilizing the EPON's frame and protocol is proposed and the implementation results showing protection within 1 msec are provided.

A study on An Optimal Protection System for Power Distribution Networks by Applying Multi-Agent System (Multy-agent system을 애용한 배전계통 최적 보호시스템 연구)

  • Jung, K.H.;Min, B.W.;Lee, S.J.;Choi, M.S.;Kang, S.H.
    • Proceedings of the KIEE Conference
    • /
    • 2003.07a
    • /
    • pp.299-301
    • /
    • 2003
  • In this paper, a protection system using Multi-Agent concept for power distribution network is proposed. Multi agent system consist of Feeder agent, OCR(Over Current Relay) agent, Recloser agent and Switch agent. An agent calculates and corrects its parameter by itself through communication with neighboring agents and its own intelligence algorithm. Simulations in a simple distribution network show the effectiveness of the suggested protection system. Multi-Agent System, protection of distribution network, Communication.

  • PDF

Development of a New Islanding Detection Method for Distributed Resources (분산 전원의 고립 운전 검출 기법의 개발)

  • Jang, Seong-Il;Kim, Gwang-Ho
    • The Transactions of the Korean Institute of Electrical Engineers A
    • /
    • v.50 no.11
    • /
    • pp.506-513
    • /
    • 2001
  • The islanding detection for distributed resources (DR) becomes an important and emerging issue in power system protection since the distributed generator installations are rapidly increasing and most of the installed systems are interconnected with distribution network. In order to avoid the negative impacts from islanding operations of DR on protection, operation and management of distribution system, it is necessary to effectively detect the islanding operations of DR and rapidly disconnect it from distribution network. Generally, it is difficult to detect islanding operation by monitoring only one system parameter This paper presents a new logic based islanding detection method for distributed resources(DR) which are interconnected with distribution network. The proposed method detects the islanding operation by monitoring four system parameter: voltage variation, phase displacement, frequency variation, and the variation of total harmonic distortion(THD) of current; therefore, it effectively detects island operation of DR unit operating in parallel with the distribution network. We also verified the efficiency of the proposed algorithm using the radial distribution network of IEEE 34 bus model.

  • PDF

A Study on the Impact of Applying Network Address Mutation Technology within the Network Protection System (네트워크 보호체계에서 네트워크 주소변이 기술 적용에 대한 영향성 연구)

  • Suwon Lee;Seyoung Hwang;SeukGue Hong
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.33 no.6
    • /
    • pp.939-946
    • /
    • 2023
  • In the hyper-connected network, which network equipment is diverse and network structure is complex, the attack surface has also increased. In this environment, MTD(Moving Target Defense) technology is being researched as a method to fundamentally defend against cyber attacks by actively changing the attack surface. network-based MTD technologies are being widely studied. However, in order for network address mutation technology to be applied within the existing fixed IP-based system, research is needed to determine what impact it will have. In this paper, we studied the impact of applying network address mutation technology to the existing network protection system. As a result of the study, factors to be considered when firewall, NAC, IPS, and network address mutation technologies are operated together were derived, and elements that must be managed in network address mutation technology for interoperability with the network analysis system were suggested.

Design of Pitch Limit Detection Algorithm for Submarine (잠수함의 종동요각 한계예측 알고리즘 설계)

  • Park, Jong-Yong;Kim, Nakwan;Shin, Yong-Ku
    • Journal of Ocean Engineering and Technology
    • /
    • v.30 no.2
    • /
    • pp.134-140
    • /
    • 2016
  • An envelope protection system is a control system that allows a submarine to operate freely using its own operational envelope without exceeding the structural limit, dynamic limit, and control input limit. In this paper, an envelope protection system for the pitch angle of a submarine is designed using a dynamic trim algorithm. A linear quadratic regulator and artificial neural network are used for the true dynamics approximation. A submarine maneuvering simulation program developed using experimental data is used to validate the designed envelope protection system. Simulation results show the effectiveness of the designed envelope protection system.