• Title/Summary/Keyword: 리눅스 환경

Search Result 441, Processing Time 0.027 seconds

Implementation and design of Linux IPv6 Protocol Stack on GSM Phone (GSM Phone 상에서 Linux IPv6 프로토콜 스택 설계 및 구현)

  • Lee, Sang-Woo;Lim, Dong-Hwa;Han, Bosco;Rho, Sun-Ok
    • Journal of KIISE:Information Networking
    • /
    • v.34 no.1
    • /
    • pp.16-26
    • /
    • 2007
  • It is well known that, in the near future, the lifetime of the IPv4 address space will be limited and available 32-bit IP network addresses will not be left my more. In order to solve such IPv4 address space problem in an effective way, the transition to the new version using IPv6 architecture is inevitably required. This paper presents the design and implementation of IPv4/IPv6 dual stack at the GSM Phone based on Linux Kernel 2.4 IPv6 Protocol Stack. It designs appropriately in GSM Phone environment and it is tested by a network of Linux IPv4/IPv6 dual stack on PPP. The test was processed with a test scenario and it was found that the results were successful.

Design and Implementation of Packet Filtering Mechanism for Secure Teredo Service (안전한 Teredo 서비스를 위한 패킷 필터링 메커니즘 설계 및 구현)

  • Heo, Seok-Yeol;Shin, Bum-Joo;Han, Ki-Jun;Lee, Wan-Jik
    • Journal of Korea Society of Industrial Information Systems
    • /
    • v.12 no.3
    • /
    • pp.47-59
    • /
    • 2007
  • IPv4 NAT, which often used in households or under SOHO environments, is one of the factors that delays IPv6 propagation. As IPv4 NAT does not operate properly under the transition mechanism like ISATAP or 6to4 that acts as IPv6-in-IPv4 tunneling type, Microsoft proposed Teredo in order to resolve this issue. However, tunneling transition mechanism like Teredo has a security problem. That is, being tunneled packets have dual IP headers; general firewall systems apply the filtering rules only to the outer header but not inner header when these packets pass the firewall. Furthermore, attacks using unregistered server and relay can take place in Teredo. To resolve these problems, we propose a new packet filtering mechanism exclusively for Teredo. The proposed packet filtering mechanism was designed and implemented by using Linux Netfilter and ip6tables. Through functional and experimental performance tests, this packet filtering system was found operating properly and solving the Teredo packet filtering problems without serious performance degradation.

  • PDF

Design of the Certificate-based Authorization Policy Module in a PKI Environment (PKI 환경에서 인증서 기반 권한 정책 모듈 설계)

  • Shin, Myeong-Sook;Song, Gi-Beom;Lee, Jeong-Gi;Lee, Cheol-Seung;Lee, Joon
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • v.9 no.1
    • /
    • pp.898-901
    • /
    • 2005
  • In this paper, we design an authorization policy module which provides the safty and reliable authorization of the user to provide the resolution for authorization in distributed environments. PKI have been utilized much by an information security-based structure for Internet electronic commerce, it is developing X.509-based in various application field such as a network security. Especially, it provides good resolution for the authentication of the user in the situation not to meet each other, but it is not enough to provide the resolution of the authorization in distributed computing environments. In this paper, We provide AAS model, which can be used distributed resources by distributed users, and design AAS model which is an authorization policy module in the Linux-based Apache Web server.

  • PDF

A Design and Implementation of WAP Gateway/server Integration Structure based on Linux (LINUX 기반 WAP 게이트웨이/서버 통합구조의 설계 및 구현)

  • Song, Byung-Kwen;Oh, Tae-An
    • The KIPS Transactions:PartC
    • /
    • v.10C no.2
    • /
    • pp.209-216
    • /
    • 2003
  • As the interest in the wireless internet services is increasing recently, the related technology development is in active progress. According to WAP (Wireless Application Protocol) specification which is currently considered as one of the most powerful international standardizations, mobile terminal and WAP server are supposed to communicate through WAP Gateway. This paper is about the design and implementation of IWAP platform where WAP Gateway and Server are integrated and supported based on Linux. The proposed WAP platform broadly consists of four modules like WAP Gateway, JAVA based Server development environment, WML Tool-Kit, and MUL (Management User Interface) and for bearer network, SMSC (Short Message Service Center) and CSD (Circuit Switched Data) router are considered.

C-language Learning Contents Supporting Web-based Compiling and Running (웹기반 컴파일과 실행을 지원하는 C언어 교육콘텐츠 개발)

  • Kim, Seong-Hyun;Kim, Young-Kuk
    • Proceedings of the Korea Contents Association Conference
    • /
    • 2006.11a
    • /
    • pp.796-800
    • /
    • 2006
  • In this paper, we developed an e-loaming contents for C programming language using Linux and open source software, not using commercial integrated development tool like Microsoft's Visual Studio. In most programming language courses, students study or practice the programming language by editing source code compiling and running the executable code by commercial software like Visual Studio which installed on each PC. This way of learning has some difficulties in total cost of purchasing software and using other PCs which donot have proper software installed. To overcome this situation and enable loaming anywhere, with any device, at anytime, we propose a way of utilizing Linux and open source software in Web-based learning environment. In this environment students can input their source code on the form of broweser and get the result instantly from the server.

  • PDF

Design and Implementation of a 3D Virtual Desktop System based on Windows Operation System (윈도우즈 운영체제 기반의 3D 가상 데스크톱 시스템 설계 및 구현)

  • Hong, Seung-Pyo;Oh, Myeong-Jin;Shin, Jung-Hoon;Lee, Sang-Jun
    • Journal of KIISE:Computing Practices and Letters
    • /
    • v.16 no.12
    • /
    • pp.1249-1253
    • /
    • 2010
  • As personal computers have been recently improved in performance, the multi tasking of running several applications at the same time has been generalized. Since only one task space is provided for performing such tasks on Windows operating system, a number of computer users feel inconvenient. In this paper, we propose a 3D Virtual Desktop System which can show a process of switching task spaces in 3D motion using DirectX. The proposed system can provide a computer user with more task spaces and the intuitive UI(User Interlace) such as Compiz of Linux.

Implementation of Remote Image Surveillance for Mobile Robot Platform based on Embedded Processor (주행용 로봇 플랫폼을 위한 임베디드 프로세서 기반 원격영상감시 시스템 구현)

  • Han, Kyong-Ho;Yun, Hyo-Won
    • Journal of the Korean Institute of Illuminating and Electrical Installation Engineers
    • /
    • v.23 no.1
    • /
    • pp.125-131
    • /
    • 2009
  • In this paper, we proposed the remote visual monitoring system on mobile robot platform. The proposed system is composed of ARM9 core PXA255 processor, micro CMOS camera and wireless network and the captured visual image is transmitted via 803.11b/g wireless LAN(WLAN) for remote visual monitoring operations. Robot platform maneuvering command is transmitted via WLAN from host and the $640{\times}480$, $320{\times}240$ pixel fixed visual image is transmitted to host at the rate of $3{\sim}10$ frames per second. Experimental system is implemented on Linux OS base and tested for remote visual monitoring operation and verified the proposed objects.

Protective Mechanism for Sensitive Data using Lightweight Process Tracking (경량화 프로세스 추적을 통한 중요 데이터 유출 방지)

  • Kang, Koo-Hong
    • The Journal of the Korea Contents Association
    • /
    • v.9 no.5
    • /
    • pp.33-39
    • /
    • 2009
  • As the usage of computers and mobile handsets is popularized, the processing and storing of private and business data are increased. Hence we note that these sensitive data should never be transferred out of these personal devices without user's permission. In this paper, we propose a simple method to prevent transferring the sensitive data out of personal computing devices through their networking interfaces. The proposed method determines which processes invoke open system call related to the sensitive data, and then traces them within a specific duration. The proposed scheme has advantage over the existing ones using authentication or encryption because it could be still working well independent upon the new attack technologies or the latest vulnerabilities of hardware and software. In order to verify the proposed algorithm, we test it by implementing the necessary codes at the user and kernel spaces of Linux.

A Study on the Iptables Ruleset Against DoS Attacks (DoS 공격에 대비한 Iptables의 정책에 관한 연구)

  • Jung, Sung-Jae;Sung, Kyung
    • Journal of Advanced Navigation Technology
    • /
    • v.19 no.3
    • /
    • pp.257-263
    • /
    • 2015
  • Although a variety of preparation methods for DoS attacks and DDoS attacks are presented, it is still being exploited, the vulnerability with networks and protocols. In particular, When was built environment that can be used anywhere in the Internet, Internet of Things is entering era. Thus, the conventional computer, as well as household appliances, etc. DoS attack targets or are likely to do the attacker role is increasing. In this paper, we first find out about the type and characteristics of DoS attacks. Open source operating system, Linux has iptables that packet filtering tool and firewall programs. Using iptables to set the policy ruleset against DoS attacks.

The Embedded Remote Monitoring Diagnosis for Integration Vessel System (디지털 선박 추진 시스템을 위한 임베디드 원격 모니터링 진단)

  • Park, Se-Hyun;Noh, Seok-Ho
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.17 no.11
    • /
    • pp.2708-2716
    • /
    • 2013
  • This paper presents implementation of embedded remote monitoring diagnosis system which has effective wireless channel structure and communication protocols with user-friendly UI for intelligent digital vessel. Developed system contains integrated vessel monitoring system, server, exclusive mobile terminal and smart phone. We designed an effective dual structure communication channel and simple but effective communication protocol on the monitoring system. Failures of the wireless communication are minimized and the wrong wireless communication channel is immediately replaced. In addition, we developed an effective embedded Linux UI for LCD. The implemented wireless monitoring system was tested and verified on digital vessel.