• Proceedings of the Korea Information Processing Society Conference
• /
• 2014.11a
• /
• pp.234-237
• /
• 2014

This paper provides insights into the sFlow monitoring system of OF@KREONET. OF@KREONET is software defined network (SDN) testbed adapted by KREONET (Korea Research Environment Open NETwork). OF@KREONET uses SDN-based network virtualization to slice the network among multiple concurrent experimenter. Flow Monitoring of OF@KREONET using sFlow. sFlow and OpenFlow can be used to provide an integrated flow monitoring system where OpenFlow controller can be used to define flows to be monitored by sFlow. OF@KREONET flow monitoring system supports monitoring of per slice FlowSpace. An Experimental can monitor his/her own FlowSpace while network administrator can monitor all spaces.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2014.05a
• /
• pp.142-146
• /
• 2014

The mobile computing has been a main mean of computing, because of recent development of smartphone and mobile communication network. The new service technologies, such as cloud computing, big data, SDN (Software Defined Network), and NFV (Network Function Virtualization), are appearing due to activating of the data center. These changes have brought various requirements for transport layer protocol. In addition, the transport protocol should have a extensible function to adapt additional technologies. This paper proposed that transport layer divide into three layer structure for extensible function, and designed the ETP(Extensible Transport Protocol) which is located in the bottom layer.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.39B no.6
• /
• pp.379-386
• /
• 2014

Recently, middleboxes play a key role in many network settings such as firewalls, VPN gateways, proxies, intrusion detection and prevention systems, and WAN optimizers. However, achieving the performance and security benefits that middleboxes offer is highly complex, and therefore it is essential to manage middleboxes efficiently and dynamically. In this respect, Software-Defined Networking (SDN) offers a promising solution for middlebox policy enforcement by using logically centralized management, decoupling the data and control planes, and providing the ability to programmatically configure forwarding rules. Also, cloud computing and distributed Network Function Virtualization (NFV) can enable to manage middleboxes more easily. We introduce SDN-based middlebox management framework in integrated wired and wireless networks and discuss the further issues.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.21 no.1
• /
• pp.201-212
• /
• 2011

Smartphone devices are widely used because of recent improvements in hardware device, network infrastructure, and emergences in open mobile platforms. These changes provide various advantages and cause security problems. One of the solutions to prevent these problems is that applying of the virtualization technology to mobile environment ha., attracted attention. In this paper, we proposed the virtualization technology which is based on security-enhanced mobile platform scheme, for secure mobile environment based on the secure execution and process concealing technology.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.10 no.8
• /
• pp.3455-3473
• /
• 2016

Cloud computing is a paradigm in which information is permanently stored in servers on the Internet and cached temporarily on clients. Virtual private network (VPN) is the most widely used technology for secure cloud access. Unfortunately, VPN-based cloud services become unavailable when a VPN failure occurs. In this paper, we propose a new scheme to improve the availability of VPN connections against such failures, called high-availability virtual communication (HAVC). Unlike most of the multipath transmission schemes in the literature, the proposed scheme is implemented by using a virtualization technique, and its protocol functions are independent of existing networks - potential clients are not required to modify their applications or operating systems. Simulation results show that the HAVC can not only tolerate VPN failures but also achieve high transmission performance.

• Electronics and Telecommunications Trends
• /
• v.30 no.1
• /
• pp.133-143
• /
• 2015

최근 기술발전으로 컴퓨터 수준의 스마트 디바이스를 이용한 무선 인터넷 서비스 이용이 확대되고 있어 이에 따른 트래픽 증가를 효율적으로 수용하기 위한 새로운 이동통신시스템과 네트워크 구조 연구가 활발하게 진행되고 있다. 이러한 과정에 유선 IT 분야에서 선행적으로 진행된 SDN(Software Defined Network) 및 cloud & virtualization 기술들을 이동통신의 액세스 또는 서비스 플랫폼 환경에 적용하는 선도적인 연구개발이 진행되고 있어 SDN 및 cloud & virtualization 분야에 대한 최근 동향을 파악하고 이러한 기술들이 이동통신분야에 적용되는 다양한 사례들을 분석하여 새로운 형태의 네트워크 및 시스템 구조와 방식에 대한 연구개발 방향을 제시한다.

• Smart Media Journal
• /
• v.5 no.1
• /
• pp.69-77
• /
• 2016

This paper proposes a software defined storaging method to converge the network virtualization technique and the RAID of distributed storage environment. The proposed method designs software based storage which it apply a flexible control and maintenance of storages. In addition, the method overcomes the restricted of physical storage capacity and cut costs of data recovery. The proposed failover recovery technique based on Software-Defined RAID has been tested the substantial verification and the performance using public AWS and Google Storage.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2011.11a
• /
• pp.584-586
• /
• 2011

네트워크 가상화(Network virtualization)란 물리적인 네트워크 자원들의 사용 효율을 높이기 위한 방법으로 자원들을 논리적으로 분리하는 기술이다. 네트워크 가상화는 클라우드 컴퓨팅(Cloud computing) 구현을 위한 네트워크 인프라(Infrastructure) 제공 기술로 각광받고 있다. 또한 MPLS(Multiprotocol Label Switching)기술은 빠른 고속 전송을 위한 라우팅 기술로서 가상 사설망을 구성하는 기술로 많이 사용되고 있다. 본 논문에서는 MPLS 라우팅 기술을 활용하여 클라우드 컴퓨팅 서버 간의 패킷 전송에 다양한 장점을 활용할 수 있는 방법을 제시한다. 제안하는 시스템은 독립성, 유연성, 성능과 비용의 요구사항을 만족하며, 논리적인 망분리를 통해 다양한 클라우드 컴퓨팅에 맞는 인프라를 서비스할 수 있다.

• Journal of Internet Computing and Services
• /
• v.22 no.5
• /
• pp.27-33
• /
• 2021

With the broad adoption of the Internet of Things (IoT) in a variety of scenarios and application services, management and orchestration entities require upgrading the traditional architecture and develop intelligent models with ultra-reliable methods. In a heterogeneous network environment, mission-critical IoT applications are significant to consider. With erroneous priorities and high failure rates, catastrophic losses in terms of human lives, great business assets, and privacy leakage will occur in emergent scenarios. In this paper, an efficient resource slicing scheme for optimizing federated learning in software-defined IoT (SDIoT) is proposed. The decentralized support vector regression (SVR) based controllers predict the IoT slices via packet inspection data during peak hour central congestion to achieve a time-sensitive condition. In off-peak hour intervals, a centralized deep neural networks (DNN) model is used within computation-intensive aspects on fine-grained slicing and remodified decentralized controller outputs. With known slice and prioritization, federated learning communications iteratively process through the adjusted resources by virtual network functions forwarding graph (VNFFG) descriptor set up in software-defined networking (SDN) and network functions virtualization (NFV) enabled architecture. To demonstrate the theoretical approach, Mininet emulator was conducted to evaluate between reference and proposed schemes by capturing the key Quality of Service (QoS) performance metrics.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.41 no.12
• /
• pp.1914-1924
• /
• 2016

In this paper, considering virtualized Evolved Packet Core(vEPC) network for 5G mobile network, we propose architecture for supporting Service Function Chaining(SFC) in 5G mobile network. Using SFC in 5G network, dynamic path configuration and providing network services based on subscriber and traffic information. SFC technology provides logical ordered set of network functions and delivers packet through providing logical path over the physical network. Based on the perspective of 5G core network in distributed manner, we design hierarchical SFC architecture to manage SFC for global path including vEPC and SGi-LAN network, and internal path between virtualized network functions in each cloud. In this paper, we define architecture and call flow for establishing data path using SFC. Finally, we design testbed architecture for real implementation based on open source software.