-
-
-
公开(公告)号：KR1020170077308A
公开(公告)日：2017-07-06
申请号：KR1020150187046
申请日：2015-12-28
Applicant: 한국전자통신연구원
Inventor： 박상길
IPC: H04L12/813 , H04L12/917 , H04L12/743 , H04L29/06
CPC classification number: H04L67/22 , H04L43/028 , H04L47/00 , H04L67/02 , H04L67/42
Abstract: 본발명의일 실시예에따른네트워크트래픽관리장치는패킷을 1차분석하여 2차분석의진행여부를결정하고, 상기 2차분석을진행할패킷을상기패킷이전송될서비스서버와관련된제 2 트래픽제어엔진으로전달하는제 1 트래픽제어엔진, 및상기제 1 트래픽제어엔진으로부터전달되는패킷중에서상기 2차분석이필요한패킷에대해상기 2차분석을수행하고, 상기 2차분석수행결과에따라상기서비스서버로전달할패킷을상기제 1 트래픽제어엔진으로전달하는복수의제 2 트래픽제어엔진을포함할수 있다.
Abstract translation: 根据本发明实施例的网络流量管理装置通过首先分析分组来确定是否继续进行二次分析，并将要进行二次分析的分组发送到第二流量控制 以及第二业务分析引擎，用于对从第一业务控制引擎发送的分组中的需要第二分析的分组执行第二分析， 以及用于将分组传送到第一交通控制引擎的第二交通控制引擎。
-
-
公开(公告)号：KR1020140077280A
公开(公告)日：2014-06-24
申请号：KR1020120145875
申请日：2012-12-14
Applicant: 한국전자통신연구원
IPC: H04L12/801
CPC classification number: H04L45/121
Abstract: Disclosed are a method for forwarding a packet and an apparatus therefor. The method of forwarding a packet includes the steps of: analyzing a plurality of path properties for transmitting the packet; analyzing a signature of the packet; determining a path having the lowest transmission delay among paths based on the path properties when the signature satisfies a predefined packet property; and transmitting the packet through the path having the lowest transmission delay. Thus, an optimal path can be determined from the paths and the packet can be transmitted through the determined optimal path.
Abstract translation: 公开了一种用于转发分组的方法及其装置。 转发分组的方法包括以下步骤：分析用于发送分组的多个路径属性; 分析分组的签名; 当所述签名满足预定的分组属性时，基于所述路径属性来确定路径中具有最低传输延迟的路径; 并通过具有最低传输延迟的路径发送分组。 因此，可以从路径确定最佳路径，并且可以通过所确定的最优路径来发送分组。
-
Patent Agency Ranking
公开(公告)号：KR1020140051093A
公开(公告)日：2014-04-30
申请号：KR1020130125692
申请日：2013-10-22
Applicant: 한국전자통신연구원
IPC: H04L12/801
CPC classification number: H04L47/2441 , H04L47/16 , H04L47/2483
Abstract: A network dualizing device according to the present invention comprises multiple network interface units which store information on a flow flowing in the network interface units when no information on the flow exists and which provide the information on the flow for a master unit when the flow accords with an asymmetric flow; and the master unit which stores the information on the flow provided by the network interface units and which provides information on an opposite flow for the network interface units when the information on the opposite flow is stored in the master unit. Therefore, the present invention enables integrated management and analysis for the asymmetric flow which has different paths for taking in and discharging packets. [Reference numerals] (210) First network interface unit; (220) Second network interface unit; (230) Third network interface unit; (240) Fourth network interface unit; (250) Master unit
Abstract translation: 根据本发明的网络对偶化设备包括多个网络接口单元，当不存在关于流的信息时，存储关于在网络接口单元中流动的流的信息，并且当流符合 不对称流动; 以及主单元，其存储关于由网络接口单元提供的流的信息，并且当关于相反流的信息被存储在主单元中时，主单元提供关于网络接口单元的相反流的信息。 因此，本发明能够对具有不同路径的非对称流进行综合管理和分析，以便接收和放出分组。 （标号）（210）第一网络接口单元; （220）第二网络接口单元; （230）第三网络接口单元; （240）第四网络接口单元; （250）主单元
-
公开(公告)号：KR1020140051047A
公开(公告)日：2014-04-30
申请号：KR1020130072073
申请日：2013-06-24
Applicant: 한국전자통신연구원
IPC: H04L12/801
CPC classification number: H04L47/2441 , H04L47/16 , H04L47/2483
Abstract: A network dualizing device according to the present invention comprises multiple network interface units which store information on a flow flowing in the network interface units when no information on the flow exists and which provide the information on the flow for a master unit when the flow accords with an asymmetric flow; and the master unit which stores the information on the flow provided by the network interface units and which provides information on an opposite flow for the network interface units when the information on the opposite flow is stored in the master unit. Therefore, the present invention enables integrated management and analysis for the asymmetric flow which has different paths for taking in and discharging packets. [Reference numerals] (210) First network interface unit; (220) Second network interface unit; (230) Third network interface unit; (240) Fourth network interface unit; (250) Master unit
Abstract translation: 根据本发明的网络二元化装置包括多个网络接口单元，当没有关于流的信息存在时，存储关于在网络接口单元中流动的流的信息，并且当流符合时提供关于主单元的流的信息 不对称流; 以及主单元，其存储由网络接口单元提供的流的信息，并且当相对流的信息存储在主单元中时，为主网络接口单元提供关于网络接口单元的相反流的信息。 因此，本发明能够对不对称流进行综合管理和分析，该不对称流具有用于接收和排出分组的不同路径。 （附图标记）（210）第一网络接口单元; （220）第二网络接口单元; （230）第三网络接口单元; （240）第四网络接口单元; （250）主机
-
公开(公告)号：KR101060733B1
公开(公告)日：2011-08-31
申请号：KR1020080131726
申请日：2008-12-22
Applicant: 한국전자통신연구원
Abstract: 본 발명은 어플리케이션 프로토콜인식을 이용한 네트워크 침입탐지 방법 및 장치에 관한 것으로, 네트워크 상에서 보호 대상 서비스에 대하여 어플리케이션 프로토콜의 모델을 자동으로 생성하고 이를 적용하여 서비스와 시스템을 보호함으로써, 대상 서비스에 대한 사전 지식 없이도 프로토콜 모델을 생성할 수 있어, 대상에 대한 사전 조사에 소요되는 자원 및 시간의 낭비를 방지하고, 지나치게 복잡하지 않으면서 단순하지 않은 모델을 생성하므로 오탐 및 미탐의 확률을 크게 감소시켜 정확성이 향상되고, 복수의 서버에 대한 보안 서비스의 동시 제공이 가능하므로 확장성이 크게 향상되는 효과가 있다.
침입탐지, 키워드, 키워드리스트, 프로토콜모델, PTA, DFA-
公开(公告)号：KR1020110071817A
公开(公告)日：2011-06-29
申请号：KR1020090128477
申请日：2009-12-21
Applicant: 한국전자통신연구원
IPC: H04L12/26 , H04L12/801
CPC classification number: H04L47/2441 , H04L47/13 , H04L47/2408 , H04L47/2475
Abstract: PURPOSE: A traffic control device and a method thereof are provided to distinguish and classify the application service traffic for the various application service traffics without the loss on a real time basis. CONSTITUTION: An interface connect part(101) transmits and receives an outer line and an internetwork protocol packet. A frame generating unit(102) receives the internetwork protocol packet through the interface connect part. The frame generating unit creates the MAC(Media Access Control) frame. A network processor(103) transmits and receives the internetwork protocol packet from the frame maker. A network processor processes one or more programmable applications. The network processor distinguishes the programmable applications by the classifying process.
Abstract translation: 目的：提供一种流量控制装置及其方法，用于区分和分类各种应用服务流量的应用服务流量，而不会实时丢失损失。 构成：接口连接部分（101）发送和接收外线和互联网协议分组。 帧生成单元（102）通过接口连接部分接收互联网协议分组。 帧生成单元创建MAC（媒体访问控制）帧。 网络处理器（103）从帧制造者发送和接收互联网协议分组。 网络处理器处理一个或多个可编程应用。 网络处理器通过分类过程区分可编程应用。
-
公开(公告)号：KR1020110071619A
公开(公告)日：2011-06-29
申请号：KR1020090128237
申请日：2009-12-21
Applicant: 한국전자통신연구원
Abstract: PURPOSE: A method for securing integrity of policy using relation and containment based on hashing is provided to reduce the usage of a memory, by comparing data based on the hashed result value. CONSTITUTION: A first policy is inputted(101). At least one data among relation, distance and containment is calculated on the basis of hash(102). Relation and containment between the first policy and the second policy are calculated using the calculated data(103). Integrity is secured by managing the first policy, based on the calculated relation and containment(104).
Abstract translation: 目的：通过比较基于哈希结果值的数据，提供了一种基于哈希值来保护使用关系和封闭的策略完整性的方法，以减少内存的使用。 规定：输入第一项政策（101）。 基于散列（102）计算关系，距离和容纳之间的至少一个数据。 使用计算的数据（103）计算第一策略和第二策略之间的关系和控制。 通过根据计算的关系和遏制（104）管理第一个策略来确保完整性。
-
-
-
-
-
-
-
-
-
Search Results
51
records
(took 0.03 seconds)
