• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제16권8호
• /
• pp.2801-2815
• /
• 2022

With the advent and realization of Software Defined Network (SDN) architecture, many organizations are now shifting towards this paradigm. SDN brings more control, higher scalability, and serene elasticity. The SDN spontaneously changes the network configuration according to the dynamic network requirements inside the constrained environments. Therefore, a monitoring system that can monitor the physical and virtual entities is needed to operate this type of network technology with high efficiency and proficiency. In this manuscript, we propose a real-time monitoring system for data collection and visualization that includes the Prometheus, node exporter, and Grafana. A node exporter is configured on the physical devices to collect the physical and virtual entities resources utilization logs. A real-time Prometheus database is configured to collect and store the data from all the exporters. Furthermore, the Grafana is affixed with Prometheus to visualize the current network status and device provisioning. A monitoring system is deployed on the physical infrastructure of the KOREN topology. Data collected by the monitoring system is further pre-processed and restructured into a dataset. A monitoring system is further enhanced by including machine learning techniques applied on the formatted datasets to identify the elephant flows. Additionally, a Random Forest is trained on our generated labeled datasets, and the classification models' performance are verified using accuracy metrics.

• Journal of Advanced Marine Engineering and Technology
• /
• 제35권7호
• /
• pp.907-913
• /
• 2011

Swirling flows are related to the spiral motion in the tangential direction in addition to the axial and radial direction using several swirl generators. These type of flows are used in combustion chambers to improve flame stability, heat exchanger to enhance heat transfer coefficients, agricultural spraying machines and some vertical pipes to move slurries or transport of materials. However, only a few studies three dimensional velocity profiles in a vertical pipe have been reported. In this present paper, 3 dimension particle image velocimetry(PIV) technique was employed to measure the velocity profiles in water along a vertical circular pipe with Reynolds number from 6000 to 13,000. A tangential inlet condition was used as the swirl generator to produce the required flow. The velocities were measured with swirling flow in the water along the test section using the PIV technique.

• 한국정보과학회논문지:정보통신
• /
• 제29권5호
• /
• pp.495-500
• /
• 2002

We propose a new estimation method for rate adjustment in the face of a packet loss in the TFRC protocol, a TCP-Friendly congestion control protocol for UDP flows. Previous methods respond in a sensitive way to a single packet loss, resulting in oscillatory transmission behavior. This is an undesirable for multimedia services demanding constant bandwidth. The proposed TFRC provides more smooth and fair (against TCP flows) transmission through collective response based on multiple packets loss events. We show our "Exponential smoothing method" performs better than known "Weight smoothing method" in terms of smoothness and fairness.

• 산학경영연구
• /
• 제4권
• /
• pp.71-104
• /
• 1991

• 한국경영과학회:학술대회논문집
• /
• 대한산업공학회/한국경영과학회 1994년도 춘계공동학술대회논문집; 창원대학교; 08월 09일 Apr. 1994
• /
• pp.464-464
• /
• 1994

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제10권8호
• /
• pp.3551-3567
• /
• 2016

The Low Earth Orbit satellite network has the unique characteristics of the non-uniform and time-variant traffic load distribution, which often causes severe link congestion and thus results in poor performance for delay-sensitive flows, especially when the network is heavily loaded. To solve this problem, a novel adaptive routing algorithm, referred to as the delay-oriented adaptive routing algorithm (DOAR), is proposed. Different from current reactive schemes, DOAR employs Destination-Sequenced Distance-Vector (DSDV) routing algorithm, which is a proactive scheme. DSDV is extended to a multipath QoS version to generate alternative routes in active with real-time delay metric, which leads to two significant advantages. First, the flows can be timely and accurately detected for route adjustment. Second, it enables fast, flexible, and optimized QoS matching between the alternative routes and adjustment requiring flows and meanwhile avoids delay growth caused by increased hop number and diffused congestion range. In addition, a retrospective route adjustment requesting scheme is designed in DOAR to enlarge the alternative routes set in the severe congestion state in a large area. Simulation result suggests that DOAR performs better than typical adaptive routing algorithms in terms of the throughput and the delay in a variety of traffic intensity.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제8권4호
• /
• pp.1307-1323
• /
• 2014

With the exhaustion of global IPv4 addresses, IPv6 technologies have attracted increasing attentions, and have been deployed widely. Meanwhile, new applications running over IPv6 networks will change the traditional traffic characteristics obtained from IPv4 networks. Traditional models obtained from IPv4 cannot be used for IPv6 network monitoring directly and there is a need to investigate those changes. In this paper, we explore the flow features of IPv6 traffic and compare its difference with that of IPv4 traffic from flow level. Firstly, we analyze the differences of the general flow statistical characteristics and users' behavior between IPv4 and IPv6 networks. We find that there are more elephant flows in IPv6, which is critical for traffic engineering. Secondly, we find that there exist many one-way flows both in the IPv4 and IPv6 traffic, which are important information sources for abnormal behavior detection. Finally, in light of the challenges of analyzing massive data of large-scale network monitoring, we propose a group flow model which can greatly reduce the number of flows while capturing the primary traffic features, and perform a comparative measurement analysis of group users' behavior dynamic characteristics. We find there are less sharp changes caused by abnormity compared with IPv4, which shows there are less large-scale malicious activities in IPv6 currently. All the evaluation experiments are carried out based on the traffic traces collected from the Northwest Regional Center of CERNET (China Education and Research Network), and the results reveal the detailed flow characteristics of IPv6, which are useful for traffic management and anomaly detection in IPv6.

• 통상정보연구
• /
• 제16권4호
• /
• pp.151-167
• /
• 2014

본 논문은 무역개방의 확대와 해외직접투자로 인한 세계화의 확대가 한국의 소득분배에 미친 영향을 분석하였다. 따라서 본 연구는 소득분배의 불평등과 관련하여 중요한 결정요인이 무엇인가를 밝혀내기 위해 기존의 연구에서 중요한 결정요인으로 간주한 무역개방, 1인당 개인소득은 물론 FDI에 중점을 두었으며, 이를 국내 유입된 FDI와 해외로 유출된 FDI로 구분하여 모형을 분석하였다. 본 연구는 이를 위해 1992년부터 2011년까지의 매년의 시계열 자료를 가지고 단위근과 공적분 검정, 그리고 오차수정모형도 실행하여 분석하였다. 분석결과에 따르면, 무역개방과 1인당 GDP의 증가는 한국의 소득분배에 긍정적인 영향을 준 것으로 나타났다. 이는 수출의 증가로 인한 무역개방의 확대가 소득의 증가를 가져오는 동시에 소득분배의 형평성을 제고시켰다고 할 수 있다. 반면에 FDI의 경우를 보면, 국내로 유입된 해외직접투자와 해외로 유출된 FDI 모두 소득분배의 불평등을 야기한 것으로 나타났다. 결국 FDI 유입과 유출이 확대되는 경우 소득분배의 불평등이 더욱 증가하였음을 의미한다고 하겠다. 또한 분석결과, 국내로 유입된 FDI가 해외로 유출된 FDI보다 소득분배의 불평등에 더 부정적인 결과를 초래한 것으로 나타났다. 이 결과는 Freenstra and Hanson (2007)의 가설과 일맥상통하는 점이 있다. 따라서 정책입안자는 FDI 유입정책과 관련하여 좀 더 실용적인 정책을 마련하는 것이 필요하다고 할 수 있다.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제4권3호
• /
• pp.428-451
• /
• 2010

Traffic matrix-based anomaly detection and DDoS attacks detection in networks are research focus in the network security and traffic measurement community. In this paper, firstly, a new type of unidirectional flow called IF flow is proposed. Merits and features of IF flows are analyzed in detail and then two efficient methods are introduced in our DDoS attacks detection and evaluation scheme. The first method uses residual variance ratio to detect DDoS attacks after Recursive Least Square (RLS) filter is applied to predict IF flows. The second method uses generalized likelihood ratio (GLR) statistical test to detect DDoS attacks after a Kalman filter is applied to estimate IF flows. Based on the two complementary methods, an evaluation formula is proposed to assess the seriousness of current DDoS attacks on router ports. Furthermore, the sensitivity of three types of traffic (IF flow, input link and output link) to DDoS attacks is analyzed and compared. Experiments show that IF flow has more power to expose anomaly than the other two types of traffic. Finally, two proposed methods are compared in terms of detection rate, processing speed, etc., and also compared in detail with Principal Component Analysis (PCA) and Cumulative Sum (CUSUM) methods. The results demonstrate that adaptive filter methods have higher detection rate, lower false alarm rate and smaller detection lag time.

• 제어로봇시스템학회논문지
• /
• 제19권7호
• /
• pp.653-660
• /
• 2013

This paper deals with the problem of unfairness among uplink TCP (Transmission Control Protocol) flows associated with frame aggregation employed in IEEE 802.11n WLANs (Wireless Local Area Networks). When multiple stations have uplink TCP flows and transmit TCP data packets to an AP (Access Point), the AP has to compete for channel access with stations for the transmission of TCP ACK (acknowledgement) packets to the stations. Due to this contention-based channel access, TCP ACKs tend to be accumulated in the AP's downlink buffer. We show that the frame aggregation in the MAC (Medium Access Control) layer increases TCP ACK losses in the AP and leads to the serious unfair operation of TCP congestion control. To resolve this problem, we propose the TAC (TCP ACK Compression) mechanism operating at the top of the AP's interface queue. By exploiting the properties of cumulative TCP ACK and frame aggregation, TAC serves only the representative TCP ACK without serving redundant TCP ACKs. Therefore, TAC reduces queue occupancy and prevents ACK losses due to buffer overflow, which significantly contributes to fairness among uplink TCP flows. Also, TAC enhances the channel efficiency by not transmitting unnecessary TCP ACKs. The simulation results show that TAC tightly assures fairness under various network conditions while increasing the aggregate throughput, compared to the existing schemes.