• Proceedings of the IEEK Conference
• /
• 2003.07d
• /
• pp.1597-1600
• /
• 2003

InfiniBand 구조는 입출력 처리에 최적화된 입출력 연결망과 프로세서 상호간 통신에 최적화된 클러스터 연결 망을 통합한 차세대 클러스터 연결 망이다. 본 논문에서는 리눅스 운영체제를 기반으로 하는 InfiniBand 연결망용 호스트 채널 어댑터(HCA : Host Channel Adapter)장치 드라이버의 소프트웨어 스택 및 구조, 그리고 메시지 전송 절차에 대해 설명하였고 장치 드라이버의 동작 검증을 위한 환경 및 테스트에 대해 논하였다.

• Proceedings of the Korea Society for Simulation Conference
• /
• 2002.11a
• /
• pp.29-37
• /
• 2002

본 논문은 가상 공격 시뮬레이션을 위한 공격자 및 리눅스 기반 호스트에 대한 모델링 방법의 제안을 주목적으로 한다. 최근, Amoroso는 보안 메커니즘 중심의 침입 모델을 제안하였으나, 시뮬레이션 접근이 분명치 않은 단점이 있다. 또한, Cohen은 원인-결과 모델을 이용하여 사이버 공격과 방어를 표현한 바 있으나, 개념적 단계의 추상화 모델링으로 인해 실제 적용이 어려운 실정이다. 이를 해결하고자 하는 시도로 항공대 지능시스템 연구실에서 SES/MB 프레임워크를 이용한 네트워크 보안 모델링 및 시뮬레이션 방법을 제안한 바 있으나, 공격에 따른 호스트의 복잡한 변화를 표현하기에는 부족하다. 이러한 문제점들을 해결하고자, 본 논문에서는 시스템의 구조를 표현하는 기존 SES에 합성용 규칙기반 전문가 시스템 방법론을 통합한 Rule-Based SES를 적용하여 공격자를 모델링하고, DEVS를 기반으로 하는 네트워크 구성원을 모델링한다. 제안된 모델링 방법의 타당성을 검증하기 위해 본 논문에서는 샘플 네트워크에 대한 사례연구를 수행한다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2006.06a
• /
• pp.280-282
• /
• 2006

대용량 데이터 처리를 위한 SAN(Storago Area Network)는 각 호스트마다 두 대의 HBA(Host Bus Adapter)사용 하며, 한대는 Active로서 활동을 하고 다른 한대는 Active가 동작하지 않을 때를 대비하여 Standby로 사용된다. 현재 리눅스 커널에선 두 대의 HBA를 동시에 사용하여 효율성을 극대화하기 위한 멀티패스를 지원하고 있다. 데이터의 패스는 라운드 로빈 방식에 의해 수행되며 단순히 패스를 돌아가며 선택하는 방식을 사용한다. 라운드 로빈 방식의 패스 셀렉터는 워크로드의 양이 일정하지 못할 경우에는 좋지 않은 성능을 보인다. 본 논문은 워크로드의 양이 일정하지 않을 경우에도 동일한 성능을 낼 수 있는 패스 셀렉터를 제안한다.

• ETRI Journal
• /
• v.35 no.4
• /
• pp.666-676
• /
• 2013

With the recent growth in smartphone services, the "mobile" environment has become a key factor to consider in the design of the future Internet. In this paper, we propose Mobile-Oriented Future Internet (MOFI), which is a new architecture for the future Internet for mobile-oriented environments. The MOFI architecture is designed with three functional features: global identifier and local locator in the identifier-locator separation, query-first data delivery for route optimization, and distributed control of identifier-locator mapping. The proposed architecture and functional operations are implemented and tested using the Linux platform. From the experiment results, we see that the MOFI architecture performs better than the existing identifier-locator separation schemes, such as Proxy Mobile IP and Host Identity Protocol, in terms of data throughout, mapping control overhead, and handover delay.

• Proceedings of the Korean Information Science Society Conference
• /
• 2003.04a
• /
• pp.278-280
• /
• 2003

NIDS 구조의 근본적인 결함을 이용하는 공격기법과 또한 우회하는 공격기법이 많이 개발되고있다. 이러한 NIDS에 대한 공격기법의 해결로 HIDS가 사용 될 수 있으나 HIDS 또한 서비스 하는 시스템 자체 내에 탑재하기 때문에 시스템에 많은 부하를 준다. 따라서 NIDS의 많은 장점들을 유지하면서도 NIDS의 한계를 극복하고 HIDS로써 시스템에 많은 과부하를 주지 않는 새로운HIDS 모델을 제시한다. 제안된 HIDS는 특성상 모든 곳에서의 접속을 허용하므로 보안이 취약한 Web 서버의 보안 강화를 목적으로 설계되었다. 또한, Web 서버는 Web Service라는 특정 목적만을 위해 운영되기 때문에 HIDS를 설치하더라도 Web 공격에 대해서만 고려함으로써 HIDS의 부하를 상당히 줄일 수 있다. 본 논문에서 제안하는 HIDS는 Linux 운영체제의 Kernel에서 TCP Stream을 추출하여 이를 감사 자료로써 사용하여 침입탐지를 한다.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.8 no.5
• /
• pp.1141-1145
• /
• 2007

Rapid development of high-micro device design and wireless mobile communication technique enables each information instrument and devices to form intelligent network. The discussion of ubiquitous computing that provide information when and where desired is advanced actively. Information collected through ubiquitous sensor network assists it will be able to provide a convenient and accurate service. In this paper, we design and implement system which shows in realtime through TFT/LCD display device sensing data transmitted in embedded system instead of host pc.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2008.05a
• /
• pp.641-644
• /
• 2008

This paper describes the GUI implementation of an intelligent embedded system which can be used for a personal information platform and an industrial mobile application system. It shows the architecture and the necessary structure and components of X Window graphic system. The embedded system used in this paper has low power and high performance processor, and has a large memory size with a nand-flash memory device. We configured the linux kernel with a TIT-LCD and touch screen device for the operation of X Window system. And we used GTK+2 for running application softwares on the platform embedded system. The GUI library of GTK+2 is useful for providing the same graphics programming environment with host Linux PC. We have developed in this paper the X Window system and the GUI environment for GTK+2 in a new embedded system, and verified the full operation of X Window system and application softwares using GTK+2. The embedded system with large memory size can be used in X Window application softwares for providing a personal information service with a mobile embedded system.

• The KIPS Transactions:PartC
• /
• v.12C no.6 s.102
• /
• pp.865-874
• /
• 2005

The information stored in the computer system needs to be protected from unauthorized access, malicious destruction or alteration and accidental inconsistency. In this paper, we propose an intrusion detection system based on sensor concept for defecting and preventing malicious attacks We use software sensor objects which consist of sensor file for each important directory and sensor data for each secret file. Every sensor object is a sort of trap against the attack and it's touch tan be considered as an intrusion. The proposed system is a new challenge of setting up traps against most interception threats that try to copy or read illicitly programs or data. We have implemented the proposed system on the Linux operating system using loadable kernel module technique. The proposed system combines host~based detection approach and network-based one to achieve reasonably complete coverage, which makes it possible to detect unknown interception threats.

• Journal of Internet Computing and Services
• /
• v.4 no.1
• /
• pp.53-65
• /
• 2003

I/O processing speed of relatively sluggish storage devices incurs overall performance degradation in computer systems. As a solution to improve the situation, SAN(Storage Area Network) has been proposed. In order to utilize a SAN system more effectively, where storage devices are directly connected with a high speed network such as Fibre Channel, a proper management tool is needed. In this paper, we present a design and implementation of a performance monitoring and configuration management tool for the SANtopia system which supports global file sharing in the SAN environment The developed tool is to monitor the performance of the Linux hosts composing the SANtopia system and to manage the configuration of the hosts and storage devices. It also supports GUI(Graphic User Interface) environment using the JAVA programming language.

• Journal of KIISE:Computer Systems and Theory
• /
• v.34 no.9
• /
• pp.459-466
• /
• 2007

TCP/IP processing imposes a heavy load on the host CPU when it is processed by the host CPU on a very high-speed network. Recently the TCP/IP Offload Engine (TOE), which processes TCP/IP on a network adapter instead of the host CPU, has become an attractive solution to reduce the load in the host CPU. There have been two approaches to implement TOE. One is the software TOE in which TCP/IP is processed by an embedded processor and the other is the hardware TOE in which TCP/IP is processed by a dedicated ASIC. The software TOE has poor performance and the hardware TOE is neither flexible nor expandable enough to add new features. In this paper we designed and implemented a hybrid TOE architecture, in which TCP/IP is processed by cooperation of hardware and software, based on an FPGA that has two embedded processor cores. The hybrid TOE can have high performance by processing time-critical operations such as making and processing data packets in hardware. The software based on the embedded Linux performs operations that are not time-critical such as connection establishment, flow control and congestions, thus the hybrid TOE can have enough flexibility and expandability. To improve the performance of the hybrid TOE, we developed a hardware-based transmission/reception accelerator that processes important operations such as creating data packets. In the experiments the hybrid TOE shows the minimum latency of about $19{\mu}s$. The CPU utilization of the hybrid TOE is below 6 % and the maximum bandwidth of the hybrid TOE is about 675 Mbps.