• 제목/요약/키워드: software-defined networks

검색결과 160건 처리시간 0.03초

소프트웨어-정의 네트워크에서 분산형 서비스 거부(DDoS) 공격에 대한 탐지 기술 연구 (A Study on the Detection Technique of DDoS Attacks on the Software-Defined Networks)

  • 김순곤
    • 한국정보전자통신기술학회논문지
    • /
    • 제13권1호
    • /
    • pp.81-87
    • /
    • 2020
  • 최근 네트워크 구성은 SDN/NFV 기반으로 쉽고 자유로운 네트워크 서비스 구성이 가능하도록 빠르게 전환중이다. SDN의 많은 장점과 적용에도 불구하고 분산형 서비스 거부(Distributed Denial of Service: DDoS) 공격과 같은 많은 보안 문제가 연구 이슈로 지속적으로 제기되고 있다. 특히, DDoS 공격의 효과는 훨씬 더 신속하게 나타나며 기존의 네트워크에 비하여 SDN에서는 더욱더 치명적인 피해를 발생시키고 있다. 본 논문에서는 SDN에서 DDoS 공격을 감지하고 완화하기 위해 엔트로피 기반 기법을 제안하고 실험을 통해 입증하였다. 본 논문에서 제안하는 기법은 단일 시스템에 대한 DDoS 공격을 탐지하고 시간 특성 기법을 활용하여 이러한 공격을 완화하도록 설계하였으며, 제안한 기법을 적용했을때 3.21%의 네트워크 혼잡도를 발생시키지만, 20(19.86)%의 패킷 분실률을 줄이는 효과를 실험을 통해 확인하였다.

An Efficient Software Defined Data Transmission Scheme based on Mobile Edge Computing for the Massive IoT Environment

  • Kim, EunGyeong;Kim, Seokhoon
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제12권2호
    • /
    • pp.974-987
    • /
    • 2018
  • This paper presents a novel and efficient data transmission scheme based on mobile edge computing for the massive IoT environments which should support various type of services and devices. Based on an accurate and precise synchronization process, it maximizes data transmission throughput, and consistently maintains a flow's latency. To this end, the proposed efficient software defined data transmission scheme (ESD-DTS) configures and utilizes synchronization zones in accordance with the 4 usage cases, which are end node-to-end node (EN-EN), end node-to-cloud network (EN-CN), end node-to-Internet node (EN-IN), and edge node-to-core node (EdN-CN); and it transmit the data by the required service attributes, which are divided into 3 groups (low-end group, medium-end group, and high-end group). In addition, the ESD-DTS provides a specific data transmission method, which is operated by a buffer threshold value, for the low-end group, and it effectively accommodates massive IT devices. By doing this, the proposed scheme not only supports a high, medium, and low quality of service, but also is complied with various 5G usage scenarios. The essential difference between the previous and the proposed scheme is that the existing schemes are used to handle each packet only to provide high quality and bandwidth, whereas the proposed scheme introduces synchronization zones for various type of services to manage the efficiency of each service flow. Performance evaluations show that the proposed scheme outperforms the previous schemes in terms of throughput, control message overhead, and latency. Therefore, the proposed ESD-DTS is very suitable for upcoming 5G networks in a variety of massive IoT environments with supporting mobile edge computing (MEC).

Simultaneous Planning of Renewable/ Non-Renewable Distributed Generation Units and Energy Storage Systems in Distribution Networks

  • Jannati, Jamil;Yazdaninejadi, Amin;Talavat, Vahid
    • Transactions on Electrical and Electronic Materials
    • /
    • 제18권2호
    • /
    • pp.111-118
    • /
    • 2017
  • The increased diversity of different types of energy sources requires moving towards smart distribution networks. This paper proposes a probabilistic DG (distributed generation) units planning model to determine technology type, capacity and location of DG units while simultaneously allocating ESS (energy storage systems) based on pre-determined capacities. This problem is studied in a wind integrated power system considering loads, prices and wind power generation uncertainties. A suitable method for DG unit planning will reduce costs and improve reliability concerns. Objective function is a cost function that minimizes DG investment and operational cost, purchased energy costs from upstream networks, the defined cost to reliability index, energy losses and the investment and degradation costs of ESS. Electrical load is a time variable and the model simulates a typical radial network successfully. The proposed model was solved using the DICOPT solver under GAMS optimization software.

무선 네트워크에서 사전 핸드오버를 위한 프레임워크 (A Framework for Proactive Handover in Wireless Networks)

  • Duc, Thang Le;Le, Duc Tai;Choo, Hyunseung
    • 한국정보처리학회:학술대회논문집
    • /
    • 한국정보처리학회 2014년도 추계학술발표대회
    • /
    • pp.173-174
    • /
    • 2014
  • Handover is constantly a challenging issue in wireless networks. Most of the existing solutions are host-based, which are implemented on the wireless terminals and leave the decision making to the terminals. This paper studies the problem of network-based handover in the wireless networks with the constraints of low latency as well as low computational time. To address this problem, we employ the software-defined network (SDN) architecture to facilitate handover. According to the operational model of the SDN, we define a workflow for all involved network entities, and then design a framework implementing the workflow as a complete handover system. The proposed framework aims to establish a channel conveying the mobility-related information of devices and the context information of their vicinity from the switches/access routers to the controllers. Based on collected information, the controller can optimally execute the handover.

엔터프라이즈 무선네트워크에서 SDN 기반 이동성 연구 (SDN Based Mobility in Enterprise Wireless Network)

  • ;염상길;추현승
    • 한국정보처리학회:학술대회논문집
    • /
    • 한국정보처리학회 2015년도 추계학술발표대회
    • /
    • pp.335-336
    • /
    • 2015
  • Seamless mobility is one of the most crucial feature of telecommunication industry. Researches are going on in full swing to deal with this feature in most efficient manner. Software Defined Networking (SDN) is seen as the next generation paradigm which can facilitate seamless mobility across heterogeneous networks by segregating the control plane and data plane functionalities, and logically centralizing the control plane. In this paper, we propose a simplified Layer 2 handover mechanism for enterprise wireless networks, based on SDN framework. We present a network assisted L2 handover method using the IEEE 802.21 Media Independent Handover (MIH) protocol and SDN concepts, to achieve seamless mobility across heterogeneous networks.

Software Key Node Recognition Algorithm for Defect Detection based on Node Expansion Degree and Improved K-shell Position

  • Wanchang Jiang;Zhipeng Liu
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제18권7호
    • /
    • pp.1817-1839
    • /
    • 2024
  • To solve the problem of insufficient recognition of key nodes in the existing software defect detection process, this paper proposes a key node recognition algorithm based on node expansion degree and improved K-shell position, shortened as SDD_KNR. Firstly, the calculation formula of node expansion degree is designed to improve the degree that can measure the local defect propagation capability of nodes in the software network. Secondly, the concept of improved K-shell position of node is proposed to obtain the improved K-shell position of each node. Finally, the measurement of node defect propagation capability is defined, and the key node recognition algorithm is designed to identify the key function nodes with large defect impact range in the process of software defect detection. Using real software systems such as Nano, Cflow and Tar to design three sets of experiments. The corresponding directed weighted software function invoke networks are built to simulate intentional attack and defect source infection. The proposed SDD_KNR algorithm is compared with the BC algorithm, K-shell algorithm, KNMWSG algorithm and NMNC algorithm. The changing trend of network efficiency and the strength of node propagation force are analyzed to verify the effectiveness of the proposed SDD_KNR algorithm.

Real Time Spectrum Markets and Interruptible Spectrum

  • Marcus Michael J.
    • Journal of Communications and Networks
    • /
    • 제8권2호
    • /
    • pp.158-162
    • /
    • 2006
  • Historically, spectrum use has been increased through use of high frequencies, improved modulation, and between antenna techniques. However, these approaches are reaching practical limits. Cognitive radio allows new approaches to improve the intensity of use in spectrum which is licensed but under utilized. This paper addresses two such possible approaches. Real time spectrum markets permit users to exchange spectrum use. Interruptible spectrum would allow public sector spectrum users to recoup economic benefits for allowing others to share their low average, high peak use spectrum subject to preemption.

M-CORD 기반의 네트워크 슬라이스 선택 기능 (Network Slice Selection Function on M-CORD)

  • 디아즈 리베라 하비에르;칸 탈하 애흐마드;메흐무드 아시프;송왕철
    • KNOM Review
    • /
    • 제21권2호
    • /
    • pp.35-45
    • /
    • 2018
  • 네트워크 슬라이싱 기능이 모바일 네트워킹에 적용되면서 네트워크 슬라이스를 선택할 수 있는 메커니즘이 필수적이다. 5G 아키텍처에 대한 3GPP 표준 기술 사양에 따라 슬라이스 선택 프로세스를 활용하기 위해 Network Slice Selection Function (NSSF)가 포함되어 있다. 이 네트워크 기능의 실제 구현은 네트워크 인스턴스의 동적 변경 사항을 처리해야하므로 가상 네트워크 기능 (VNF)의 오케스트레이션을 지원하는 플랫폼이 필요하다. 제안 된 솔루션은 Central Office Rearchitected as a Data Center (CORD) 플랫폼에서 모바일 네트워크용으로 특화된 M-CORD를 사용하고 있다. 이는 서비스 오케스트레이터인 XoS를 통합하는 플랫폼 및 Software Defined Networking (SDN), Network Function Virtualization (NFV) 및 클라우드를 관리하는 OpenStack에 기반하고 있다. 이 플랫폼을 통해, 본 논문에서 제시된 NSSF 구현은 백엔드 서비스와 네트워크 기능 인스턴스 간의 동기화를 통해서 동적으로 슬라이스 정보를 얻을 수 있는 적절한 생태계를 제공하고 있다.

Mitigating TCP Incast Issue in Cloud Data Centres using Software-Defined Networking (SDN): A Survey

  • Shah, Zawar
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제12권11호
    • /
    • pp.5179-5202
    • /
    • 2018
  • Transmission Control Protocol (TCP) is the most widely used protocol in the cloud data centers today. However, cloud data centers using TCP experience many issues as TCP was designed based on the assumption that it would primarily be used in Wide Area Networks (WANs). One of the major issues with TCP in the cloud data centers is the Incast issue. This issue arises because of the many-to-one communication pattern that commonly exists in the modern cloud data centers. In many-to-one communication pattern, multiple senders simultaneously send data to a single receiver. This causes packet loss at the switch buffer which results in TCP throughput collapse that leads to high Flow Completion Time (FCT). Recently, Software-Defined Networking (SDN) has been used by many researchers to mitigate the Incast issue. In this paper, a detailed survey of various SDN based solutions to the Incast issue is carried out. In this survey, various SDN based solutions are classified into four categories i.e. TCP Receive Window based solutions, Tuning TCP Parameters based solutions, Quick Recovery based solutions and Application Layer based solutions. All the solutions are critically evaluated in terms of their principles, advantages, and shortcomings. Another important feature of this survey is to compare various SDN based solutions with respect to different performance metrics e.g. maximum number of concurrent senders supported, calculation of delay at the controller etc. These performance metrics are important for deployment of any SDN based solution in modern cloud data centers. In addition, future research directions are also discussed in this survey that can be explored to design and develop better SDN based solutions to the Incast issue.

대기행렬 이론 기반 SDN 제어 평면 및 응용 평면의 트래픽 성능 분석 모델 (An Analytical Traffic Model of Control Plane and Application Plane in Software-Defined Networking based on Queuing Theory)

  • 이승운;노병희
    • 한국차세대컴퓨팅학회논문지
    • /
    • 제15권4호
    • /
    • pp.80-88
    • /
    • 2019
  • 소프트웨어 정의 네트워킹(SDN)은 네트워크 장치의 데이터 기능과 제어기능을 분리한 미래 네트워킹 기술이다. 네트워크 장치들이 하나의 컨트롤러에 의해 중앙 제어되는 SDN의 구조는 대규모의 네트워크로의 확장성을 보장하기가 쉽지 않다. 선행연구들은 다수의 컨트롤러를 배치하는 수평적 확장성에 초점을 두어왔다. 이 연구들은 제어 평면과 응용 평면을 하나의 컨트롤러로 추상화하고 있다. 보편적인 SDN 아키텍처의 계층은 데이터 평면, 제어 평면, 응용 평면으로 나뉘는데 응용평면과 제어평면은 논리적으로 분리되어 있음에도 두 평면을 하나의 컨트롤러로 간주하였다. 따라서 본 논문에서는 대기행령 이론을 바탕으로 제어 평면과 응용 평면을 분리하여 반영한 트래픽 성능 분석 모델을 제안한다. 이 모델을 사용하면 복잡한 시뮬레이션 대신 간단하게 컨트롤러 배치 문제 등과 같은 확장성 문제에 활용할 수 있다.