• Title/Summary/Keyword: Control packet

Search Result 1,137, Processing Time 0.028 seconds

The Design of Router Security Management System for Secure Networking

  • Jo, Su-Hyung;Kim, Ki-Young;Lee, Sang-Ho
    • 제어로봇시스템학회:학술대회논문집
    • /
    • 2005.06a
    • /
    • pp.1594-1597
    • /
    • 2005
  • A rapid development and a wide use of the Internet have expanded a network environment. Further, the network environment has become more complex due to a simple and convenient network connection and various services of the Internet. However, the Internet has been constantly exposed to the danger of various network attacks such as a virus, a hacking, a system intrusion, a system manager authority acquisition, an intrusion cover-up and the like. As a result, a network security technology such as a virus vaccine, a firewall, an integrated security management, an intrusion detection system, and the like are required in order to handle the security problems of Internet. Accordingly, a router, which is a key component of the Internet, controls a data packet flow in a network and determines an optimal path thereof so as to reach an appropriate destination. An error of the router or an attack against the router can damage an entire network. This paper relates to a method for RSMS (router security management system) for secure networking based on a security policy. Security router provides functions of a packet filtering, an authentication, an access control, an intrusion analysis and an audit trail in a kernel region. Security policy has the definition of security function against a network intrusion.

  • PDF

The case study of implementation for a limited hospital medical information system based on ACL-applied router (ACL이 적용된 라우터 기반의 제한된 병원 의료정보시스템의 구현 사례)

  • Yoon, Sung-Ja;Kim, No-Whan;Kang, Eun-Hong
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.11 no.10
    • /
    • pp.1003-1008
    • /
    • 2016
  • Recently hospitals have divided into many divisions, specialized the medical service, and shown organic cooperation, all to provide patients with various and high quality medical service. They have also showed improvement in information protection by introducing an information protection system to regulate the access to patients' medical and personal information. The purpose of this paper is to present a case study to implement of a limited hospital medical information system that can regulate the access to medical information. For this, a router-based virtual network applying an ACL(: Access Control List) to regulate access to information was made using a packet tracer.

Building IEC 61850 SCADA system based on TETRA (TETRA 기반 IEC 61850 SCADA 시스템 구축)

  • Song, Byung-Kwen;Jeong, Tae-Ui
    • Journal of IKEEE
    • /
    • v.13 no.3
    • /
    • pp.87-94
    • /
    • 2009
  • TETRA(TErrestrial Trunked RAdio) is the wireless communication system generally adopted to public network and backbone network, as the technology of Trunked Radio System specified by ETSI(European Telecommunications Standards Institute) and currently adopted to the Electric Power IT Backbone Network in Korea. IEC 61850 is the protocol proposed for SAS(Substation Automation System) of SCADA(Supervisory Control And Data Acquisition) system. In this paper, IEC 61850 Server and Client simulator are used based on Linux operating system. The multi-functional gateway, which transforms the communication based on TCP/IP between IEC 61850 Server Simulator and Client Simulator to the one based on TETRA Packet Data Service, is developed such that IEC 61850 SCADA system is constructed based on TETRA.

  • PDF

Split-ACK Scheme for Performance Improvement of TCP Short Traffic in Wireless Environment (무선환경에서 짧은 TCP 트래픽의 성능향상을 위한 응답패킷 분할 전송 기법)

  • 진교홍
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.5 no.5
    • /
    • pp.923-930
    • /
    • 2001
  • In this paper, in order to improve the performance of TCP short traffic services in wireless Internet environments, the Split-ACKs(SPACK) scheme is proposed. In wireless networks, unlike wired networks, packet losses will occur more often due to high bit error rates. Therefore, each packet loss over wireless links results in congestion control procedure of TCP being invoked at the source. This causes severe end-to-end performance degradation of TCP. In this paper, to alleviate the TCP performance, the SPACK method, split acknowledgement packets in the base station, is proposed. Using computer simulation, the performance of TCP using SPACK is analyzed and shows better performance than traditional TCP protocol.

  • PDF

isMAC: An Adaptive and Energy-Efficient MAC Protocol Based on Multi-Channel Communication for Wireless Body Area Networks

  • Kirbas, Ismail;Karahan, Alper;Sevin, Abdullah;Bayilmis, Cuneyt
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.7 no.8
    • /
    • pp.1805-1824
    • /
    • 2013
  • Recently, the use of wireless body area networks (WBAN) has been increasing rapidly in medical healthcare applications. WBANs consist of smart nodes that can be used to sense and transmit vital data such as heart rate, temperature and ECG from a human body to a medical centre. WBANs depend on limited resources such as energy and bandwidth. In order to utilise these resources efficiently, a very well organized medium access control (MAC) protocol must be considered. In this paper, a new, adaptive and energy-efficient MAC protocol, entitled isMAC, is proposed for WBANs. The proposed MAC is based on multi-channel communication and aims to prolong the network lifetime by effectively employing (i) a collision prevention mechanism, (ii) a coordinator node (WCN) selection algorithm and (iii) a transmission power adjustment approach. The isMAC protocol has been developed and modelled, by using OPNET Modeler simulation software. It is based on a networking scenario that requires especially high data rates such as ECG, for performance evaluation purposes. Packet delay, network throughput and energy consumption have been chosen as performance metrics. The comparison between the simulation results of isMAC and classical IEEE 802.15.4 (ZigBee) protocol shows that isMAC significantly outperforms IEEE 802.15.4 in terms of packet delay, throughput and energy consumption.

Improve ARED Algorithm in TCP/IP Network (TCP/IP 네트워크에서 ARED 알고리즘의 성능 개선)

  • Nam, Jae-Hyun
    • Journal of the Korea Society of Computer and Information
    • /
    • v.12 no.3
    • /
    • pp.177-183
    • /
    • 2007
  • Active queue management (AQM) refers to a family of packet dropping mechanisms for router queues that has been proposed to support end-to-end congestion control mechanisms in the Internet. The proposed AQM algorithm by the IETF is Random Early Detection (RED). The RED algorithm allows network operators simultaneously to achieve high throughput and low average delay. However. the resulting average queue length is quite sensitive to the level of congestion. In this paper, we propose the Refined Adaptive RED(RARED), as a solution for reducing the sensitivity to parameters that affect RED performance. Based on simulations, we observe that the RARED scheme improves overall performance of the network. In particular, the RARED scheme reduces packet drop rate and improves goodput.

  • PDF

Study on The Throughput Unfairness of High-power transmission in The Transmission Power Controlled Wireless Networks Considering Green Computing (그린 컴퓨팅을 위한 무선 네트워크 전송 파워 조절에서 고출력 전송의 성능 불공평성에 대한 연구)

  • Lee, Hee-Jin;Kim, Jong-Kwon
    • Journal of the Institute of Electronics Engineers of Korea TC
    • /
    • v.47 no.10
    • /
    • pp.27-35
    • /
    • 2010
  • In wireless packet networks, energy and wireless resource efficiency is critical issue to addressed for wide deployment. To achieve the both goals of saving the mobile station's energy and increasing the wireless capacity, transmission power control is introduced to wireless packet networks. In the transmission power controled networks, it is not deeply studied on unfairness among transmissions with different power levels that reaches starvation. Through the performance analysis, this paper explains the throughput unfairness of high power transmission with the unfair media access probability owing to the contending node number difference and proposes a simple PHY-MAC cross layer approach.

Performance Improvement of WTCP by Differentiated Handling of Congestion and Random Loss (혼잡 및 무선 구간 손실의 차별적 처리를 통한 WTCP 성능 개선)

  • Cho, Nam-Jin;Lee, Sung-Chang
    • Journal of the Institute of Electronics Engineers of Korea TC
    • /
    • v.45 no.9
    • /
    • pp.30-38
    • /
    • 2008
  • The traditional TCP was designed assuming wired networks. Thus, if it is used networks consisting of both wired and wireless networks, all packet losses including random losses in wireless links are regarded as network congestion losses. Misclassification of packet losses causes unnecessary reduction of transmission rate, and results in waste of bandwidth. In this paper, we present WTCP(wireless TCP) congestion control algorithm that differentiates the random losses more accurately, and adopts improved congestion control which results in better network throughput. To evaluate the performance of proposed scheme, we compared the proposed algorithm with TCP Westwood and TCP Veno via simulations.

Connection Admission Control with QoS in Mobile Packet Networks (이동 패킷 망에서 QoS를 고려한 연결 수락 제어)

  • 이상호;김영진;박성우
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.28 no.12A
    • /
    • pp.975-982
    • /
    • 2003
  • A connection admission control scheme is proposed that can seamlessly support QoS in face of handoff in mobile packet networks. The proposed scheme is based on the adaptive time-selective bandwidth reservation with the reduced signaling and computational overhead. The reservation parameters are adjusted dynamically to cope with user mobility. Throughout the computer simulations, the performance of the proposed scheme is evaluated. As a result, it is shown that the proposed scheme reduces handoff call blocking probability remarkably, while other parameters (new call blocking probability and bandwidth utilization efficiency) are slightly deteriorated.

Modeling TCP Loss Recovery Latency for the Number of Retransmissions (재전송 개수를 고려한 TCP 손실 복구 과정의 지연 모델링 및 분석)

  • 김동민;김범준;이재용
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.28 no.12B
    • /
    • pp.1106-1114
    • /
    • 2003
  • Several analytic models describe transmission control protocol (TCP) performance such as steady-state throughput as an averaged ratio of number of transmissions to latency. For more detailed analysis of TCP latency, the latency during packet losses are recovered should be considered. In this paper, we derive the expected duration of loss recovery latency considering the number of packet losses recovered by retransmissions. Based on the numerical results verified by simulations, TCP using selective acknowledgement (SACK) option is more effective than TCP NewReno from the aspect of loss recovery latency.