• Title/Summary/Keyword: IGP

Search Result 16, Processing Time 0.021 seconds

Experimental Comparison of Network Intrusion Detection Models Solving Imbalanced Data Problem (데이터의 불균형성을 제거한 네트워크 침입 탐지 모델 비교 분석)

  • Lee, Jong-Hwa;Bang, Jiwon;Kim, Jong-Wouk;Choi, Mi-Jung
    • KNOM Review
    • /
    • v.23 no.2
    • /
    • pp.18-28
    • /
    • 2020
  • With the development of the virtual community, the benefits that IT technology provides to people in fields such as healthcare, industry, communication, and culture are increasing, and the quality of life is also improving. Accordingly, there are various malicious attacks targeting the developed network environment. Firewalls and intrusion detection systems exist to detect these attacks in advance, but there is a limit to detecting malicious attacks that are evolving day by day. In order to solve this problem, intrusion detection research using machine learning is being actively conducted, but false positives and false negatives are occurring due to imbalance of the learning dataset. In this paper, a Random Oversampling method is used to solve the unbalance problem of the UNSW-NB15 dataset used for network intrusion detection. And through experiments, we compared and analyzed the accuracy, precision, recall, F1-score, training and prediction time, and hardware resource consumption of the models. Based on this study using the Random Oversampling method, we develop a more efficient network intrusion detection model study using other methods and high-performance models that can solve the unbalanced data problem.

A Case for Using Service Availability to Characterize IP Backbone Topologies

  • Keralapura Ram;Moerschell Adam;Chuah Chen Nee;Iannaccone Gianluca;Bhattacharyya Supratik
    • Journal of Communications and Networks
    • /
    • v.8 no.2
    • /
    • pp.241-252
    • /
    • 2006
  • Traditional service-level agreements (SLAs), defined by average delay or packet loss, often camouflage the instantaneous performance perceived by end-users. We define a set of metrics for service availability to quantify the performance of Internet protocol (IP) backbone networks and capture the impact of routing dynamics on packet forwarding. Given a network topology and its link weights, we propose a novel technique to compute the associated service availability by taking into account transient routing dynamics and operational conditions, such as border gateway protocol (BGP) table size and traffic distributions. Even though there are numerous models for characterizing topologies, none of them provide insights on the expected performance perceived by end customers. Our simulations show that the amount of service disruption experienced by similar networks (i.e., with similar intrinsic properties such as average out-degree or network diameter) could be significantly different, making it imperative to use new metrics for characterizing networks. In the second part of the paper, we derive goodness factors based on service availability viewed from three perspectives: Ingress node (from one node to many destinations), link (traffic traversing a link), and network-wide (across all source-destination pairs). We show how goodness factors can be used in various applications and describe our numerical results.

Traffic Engineering with Segment Routing under Uncertain Failures

  • Zheng, Zengwei;Zhao, Chenwei;Zhang, Jianwei;Cai, Jianping
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.15 no.7
    • /
    • pp.2589-2609
    • /
    • 2021
  • Segment routing (SR) is a highly implementable approach for traffic engineering (TE) with high flexibility, high scalability, and high stability, which can be established upon existing network infrastructure. Thus, when a network failure occurs, it can leverage the existing rerouting methods, such as rerouting based on Interior Gateway Protocol (IGP) and fast rerouting with loop-free alternates. To better exploit these features, we propose a high-performance and easy-to-deploy method SRUF (Segment Routing under Uncertain Failures). The method is inspired by the Value-at-Risk (VaR) theory in finance. Just as each investment risk is considered in financial investment, SRUF also considers each traffic distribution scheme's risk when forwarding traffic to achieve optimal traffic distribution. Specifically, SRUF takes into account that every link may fail and therefore has inherent robustness and high availability. Also, SRUF considers that a single link failure is a low-probability event; hence it can achieve high performance. We perform experiments on real topologies to validate the flexibility, high-availability, and load balancing of SRUF. The results show that when given an availability requirement, SRUF has greater load balancing performance under uncertain failures and that when given a demand requirement, SRUF can achieve higher availability.

Stacked Sparse Autoencoder-DeepCNN Model Trained on CICIDS2017 Dataset for Network Intrusion Detection (네트워크 침입 탐지를 위해 CICIDS2017 데이터셋으로 학습한 Stacked Sparse Autoencoder-DeepCNN 모델)

  • Lee, Jong-Hwa;Kim, Jong-Wouk;Choi, Mi-Jung
    • KNOM Review
    • /
    • v.24 no.2
    • /
    • pp.24-34
    • /
    • 2021
  • Service providers using edge computing provide a high level of service. As a result, devices store important information in inner storage and have become a target of the latest cyberattacks, which are more difficult to detect. Although experts use a security system such as intrusion detection systems, the existing intrusion systems have low detection accuracy. Therefore, in this paper, we proposed a machine learning model for more accurate intrusion detections of devices in edge computing. The proposed model is a hybrid model that combines a stacked sparse autoencoder (SSAE) and a convolutional neural network (CNN) to extract important feature vectors from the input data using sparsity constraints. To find the optimal model, we compared and analyzed the performance as adjusting the sparsity coefficient of SSAE. As a result, the model showed the highest accuracy as a 96.9% using the sparsity constraints. Therefore, the model showed the highest performance when model trains only important features.

Quality changes of dried persimmon based on storage conditions (농가별 저장조건에 따른 건시의 품질 특성 변화)

  • Choi, Ji-Young;Jo, Jeong-Seok;Lee, Hyeon-Jeong;Woo, Jin-Ho;Heo, Su-Hyeon;Bae, Su-In;Moon, Kwang-Deog
    • Food Science and Preservation
    • /
    • v.25 no.1
    • /
    • pp.44-51
    • /
    • 2018
  • The purpose of this study is to present the results as basic data for establishing proper storage conditions and distribution conditions of actual farms at point of increasing concern about hygiene and palatabiltiy of consumers to food. In this study, three farmhouses of dried persimmons prepared using different storage conditions were selected in Sangju (Korea). The dried persimmons were stored for 90 days. Changes in temperature and humidity were measured with a temperature and humidity recorder under each storage condition, and physicochemical analysis and sensory evaluation were performed. The average temperatures of farmhouse A, B and C were approximately $-22--23^{\circ}C$, $-19--18^{\circ}C$ and $-25^{\circ}C$ respectively. The humidities of A, B and C were 62-63%, 59-60%, and 66-67%, respectively, and the moisture contents of all farmhouses increased during the storage period, with farmhouse B showing the most rapid increase. Free sugars increased, except for those from farmhouse C. Persimmons from farmhouse B showed the greatest changes in chewiness and hardness. The values of $a^*$ and $b^*$ were significantly decreased in persimmons from farmhouse B, and the color difference value of farmhouse B was dramatically increased. Sensory evaluation showed that the color preference tended to decrease compared with the initial value. Only farmhouse B showed decreased overall acceptability. Moreover, farmhouse B had the highest storage temperature and lowest humidity. Therefore, our results showed that storage at a low temperature and high humidity was important for manufacturing high-quality dried persimmons.

The UPnP Expansion for Internet Home Network Electrical Appliance Control (인터넷 홈 네트워크 가전 제어를 위한 UPnP 확장)

  • Kim Kuk-Se;Park Chan-Mo;Lee Cheol-Seung;Lee Joon
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2006.05a
    • /
    • pp.417-420
    • /
    • 2006
  • UPnP presents home network middleware for local home electrical appliances basedon internet protocols that is available access and control electrical appliances just in local home network. Itis designed to bring easy-to-use, flexible, standards-based connectivity to ad-hoc or unmanaged networks in the home, a small business, public spaces, or attached to the Internet. In this paper, Internet Gateway expands UPnP IGD(Internet Gateway Device) DCP(Device Control protocol) and UPnP IGP Bridge for Internet Home Network Electrical Appliance Control. UPnP IGD DCP is configurable initiation and sharing of internet connections, advanced connection-management features, management of host configuration service, and supports transparent Internet access by non-UPnP-certified devices. UPnP Bridge search for local home network devices by sending control messages. Control Point of UPnP Bridge search for devices of interest on the network and can control or be controlled all of functions by IGD DCP with control commands. Outside client, approach to UPnP IGD DCP, send control messages UPnP Bridge, and invoke each UPnP device. As a result, Electrical Appliance of Home Network base on UPnP, can control and be controlled via the Internet like ones in the one Home Network without modification of existing UPnP.

  • PDF