• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.26 no.9A
• /
• pp.1525-1534
• /
• 2001

국내 통신사업자들이 xDSL 등 초고속 인터넷 액세스 서비스를 왜곡된 요금구조로 경쟁적으로 보급함에 따라 급속히 확산되고 있으나, 엄밀히 원가를 감안한다면 여전히 AO/DI는 인터넷 트래픽 폭증으로 인한 전기통신망의 과부하를 통신사업자가 경제적이며 효과적으로 대처할 수 있는 현실적인 대안이라 할 수 있다. 본 논문은 AO/DI의 동적 채널 할당 및 해지에 있어서 VIA가 권고한 정책보다 효율적으로 대역폭을 할당, 해지할 수 있는 알고리즘을 제안한다. 관찰 시점까지의 누적된 트래픽의 양과 변화를 감안하여 평균 트래픽과 분산을 추정함으로써 트래픽의 변화에 적응하여 채널 할당, 해지 시점을 결정할 수 있으며 트래픽 특성에 따라 매개 변수의 조정을 통하여 D 채널, B 채널의 이용률을 제어할 수 있고 평균 대기시간 등의 성능을 최적화할 수 있음을 보인다. 또한, 이를 기초로 응용 프로토콜을 감지하여 응용이 갖는 고유의 트래픽 특성과 요구사항에 적합한 채널 할당/해지 방안도 제시한다.

• The KIPS Transactions:PartC
• /
• v.17C no.2
• /
• pp.205-214
• /
• 2010

As network traffic is dramatically increasing due to the popularization of Internet, the need for application traffic classification becomes important for the effective use of network resources. In this paper, we present an application traffic classification method based on fixed IP-port information. A fixed IP-port is a {IP address, port number, transport protocol}triple dedicated to only one application, which is automatically collected from the behavior analysis of individual applications. We can classify the Internet traffic more accurately and quickly by simple packet header matching to the collected fixed IP-port information. Therefore, we can construct a lightweight, fast, and accurate real-time traffic classification system than other classification method. In this paper we propose a novel algorithm to extract the fixed IP-port information and the system architecture. Also we prove the feasibility and applicability of our proposed method by an acceptable experimental result.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10e
• /
• pp.280-282
• /
• 2002

최근 업무 전산화로 인한 분산 컴퓨팅 환경이 확대되고 네트워크 기반의 응용 서비스들이 다양하게 개발됨에 따라 네트워크 트래픽은 증가 일로에 있으며 어느 호스트에서 어떤 형태의 트래픽이 얼마만큼 유발되는지를 알아내는 일은 한정된 네트워크 자원을 효율적으로 활용하는데 매우 중요한 일이 되었다. 하지만, 현재의 네트워크관리시스템들은 트래픽 모니터링에 따른 통계값 제공 등의 단순 평면적인 정보만을 제공할 뿐, 네트워크를 정밀 분석하고 그에 따른 대책을 마련하기에는 미약하다. 따라서 효율적인 네트워크 자원 활용을 위하여 네트워크 트래픽을 자세히 분석하며, 네트워크 계층별, 지역별, 호스트별 및 응용 서비스 별로 트래픽을 측정 및 분석할 수 있는 시스템의 개발이 필요하다. 본 논문은 한국전력데이터통신망을 대상으로 네트워크 트래픽의 발원지로부터 목적지까지의 백본 및 LAN 구간에서의 트래픽을 플로우별로 수집, 분석할 수 있는 트래픽 분석 시스템을 설계 및 구현하였다본 시스템은 트래픽 측정을 위해 백본에서는 Netflow 기능을 이용하며, LAN 구간에서는 패킷 캡처 방식의 Probe를 이용한다. 이때 기존의 패킷 캡처 방식의 기능을 개선하여 이를 플로우화 함으로써 LAN구간에서도 동일한 인터페이스를 통하여 네트워크 트래픽을 분석할 수 있게 하였다.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.36 no.2B
• /
• pp.131-140
• /
• 2011

As the number of Internet users and applications is increasing, the importance of application traffic classification is growing more and more for efficient network management. While a number of methods for traffic classification have been introduced, such as signature-based and machine learning-based methods, Skype application, which uses encrypted communication on its own P2P network, is known as one of the most difficult traffic to identify. In this paper we propose a novel method to identify Skype application traffic on the fly. The main idea is to setup a list of Skype host information {IP, port} by examining the packets generated in the Skype login process and utilizes the list to identify other Skype traffic. By implementing the identification system and deploying it on our campus network, we proved the performance and feasibility of the proposed method.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.8 no.5
• /
• pp.995-1003
• /
• 2004

A number of Internet application services are used with the development of Internet backbone nowadays. Well-known services such as WWW, ]n, email are provided at first time. Tremendous unwell-known services are presented according to the demands of various contents. After analyzing PDU information of the packet using unwell-known port travelling on the internet, searching internet service type and its statistical data is provided with internet traffic analyst as very useful information. This paper presents the mechanism to extract the internet application services operated on (un)well-known port of UDP or TCP used occasionally through netflow and tcpdump method introduced by ethereal and the operation scheme of the service. Afterwards to get the detailed statistics of the analyzed application service, the agent and the server environment, the agent gathering raw data traffics and the server adapting the traffic received from the agent BNF(Backus-Naur Form) method, is also introduced. Adapting the presented mechanism eve. LAN of Andong national university, the internet traffic service type and the detailed statistics of the analyzed application services which provides with internet traffic analyst are presented as very useful information.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.37 no.1C
• /
• pp.76-88
• /
• 2012

Traffic classification for application services in military communication networks is one of the core requirements to provide efficient resource management for NCW operations. Though several standards and organizations provided their own traffic classification methods, the methods have been mainly focused on commercial services, but not reflected military specifics. In addition, though various military application services have been emerged, some of those services have been classified into different traffic classes due to implicit criteria for the classification among organizations. In this paper, we propose a methodology to classify traffic classes and to determine delivery requirements for military application services based on various standards by DoD as well as several commercial standards based on Y.1541. The validation of the proposed methodology was carried out by comparing the results by proposed one with the traffic classification suggestions by existing commercial standards, DoD and FCS. We expect that the proposed methodology can contribute to achieve efficient operations of limited military network resources, since the proposed method can provide systematic and consistent way to assign traffic classes for new and existing military applications services.

• KIPS Transactions on Computer and Communication Systems
• /
• v.2 no.8
• /
• pp.327-334
• /
• 2013

Today's network traffic has become extremely complex and diverse since the speed of network became faster and a variety of application services appear. Moreover, many applications appear and disappear fast and continuously. However, the current traffic classification system does not give much attention to this dynamic change of applications. In this paper, we propose an application awareness system in order to solve this problem. The application awareness system can provide the information, such as the usage trend of conventional applications and the emergence of new applications by recognizing the application name in a rapidly changing network environment. In order to recognize the application name, the Host field of HTTP protocol has been utilized. The proposed mechanism consists of two steps. First, the system generates the candidates of application name by extracting the domain name from the Host field in HTTP packet. Second, the administrator confirms the name afterward. The validity of the proposed system has been proved through the experiments in campus network.

• Proceedings of the Korea Society of Information Technology Applications Conference
• /
• 2004.06a
• /
• pp.55-56
• /
• 2004

차세대 이동통신망인 B3G 시스템은 음성 트래픽뿐만 아니라 데이터, 화상, 비디오와 같은 멀티미디어 트래픽을 지원하여야 하므로 더 많은 무선 자원을 요구한다. 특히 미디어 트래픽의 전송 중에 핸드오버가 발생하면 멀티미디어 트래픽의 QoS가 지연 및 손실에 의하여 영향 받기 때문에, 정지 상태에서의 경우와 대등한 QoS를 유지하기 위해서는 효율적인 자원 예약 및 할당 방안이 필요하다. 본 논문에서는 이동 멀티미디어 망에서 이동 단말기의 이동 방향 추정에 근거하여 자원을 예약하고, 멀티미디어 트래픽을 전송하는 핸드오버 기법을 제안한다.

• Proceedings of the Korea Institute of Convergence Signal Processing
• /
• 2001.06a
• /
• pp.13-16
• /
• 2001

논문에서는 인터넷을 이용한 응용분야 중에서 원격으로 네트워크의 트래픽을 모니터링함에 있어서 시간이 흐름에 따라서 메모리의 증가를 요구하지 않는 Robin Database 방식을 이용한 방법에 대한 응용 연구 방법을 기술하였다. 먼저 기본적인 RRDtool을 이용하여 트래픽 모니터링 데이터베이스 구조 설계를 구현한 과정을 기술하였고, 데이터의 모니터링을 위한 모니터링 프로그램으로서 Perl 스크립트 언어를 이용한 작업 과정을 보려다. 마지막으로 본 연구결과를 통하여 구축된 트래픽 모니터링 시스템을 이용하여 실제 트래픽을 모니터링한 결과를 실험 결과에 제시하였다.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.39B no.6
• /
• pp.350-359
• /
• 2014

With the rapid growth of Internet, the importance of application traffic analysis is increasing for efficient network management. The statistical information in traffic flows can be efficiently utilized for application traffic identification. However, the packet out-of-order and retransmission occurred at the traffic collection point reduces the performance of the statistics-based traffic analysis. In this paper, we propose a novel method to detect and resolve the packet out-of-order and retransmission problem in order to improve completeness and accuracy of the traffic identification. To prove the feasibility of the proposed method, we applied our method to a real traffic analysis system using statistical flow information, and compared the performance of the system with the selected 9 popular applications. The experiment showed maximum 4% of completeness growth in traffic bytes, which shows that the proposed method contributes to the analysis of heavy flow.