• Title/Summary/Keyword: Network isolation

Search Result 242, Processing Time 0.022 seconds

Isolation Schemes of Virtual Network Platform for Cloud Computing

  • Ahn, SungWon;Lee, ShinHyoung;Yoo, SeeHwan;Park, DaeYoung;Kim, Dojung;Yoo, Chuck
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.6 no.11
    • /
    • pp.2764-2783
    • /
    • 2012
  • Network virtualization supports future Internet environments and cloud computing. Virtualization can mitigate many hardware restrictions and provide variable network topologies to support variable cloud services. Owing to several advantages such as low cost, high flexibility, and better manageability, virtualization has been widely adopted for use in network virtualization platforms. Among the many issues related to cloud computing, to achieve a suitable cloud service quality we specifically focus on network and performance isolation schemes, which ensure the integrity and QoS of each virtual cloud network. In this study, we suggest a virtual network platform that uses Xen-based virtualization, and implement multiple virtualized networks to provide variable cloud services on a physical network. In addition, we describe the isolation of virtual networks by assigning a different virtualized network ID (VLAN ID) to each network to ensure the integrity of the service contents. We also provide a method for efficiently isolating the performance of each virtual network in terms of network bandwidth. Our performance isolation method supports multiple virtual networks with different levels of service quality.

Optimal Design of Semi-Active Mid-Story Isolation System using Supervised Learning and Reinforcement Learning (지도학습과 강화학습을 이용한 준능동 중간층면진시스템의 최적설계)

  • Kang, Joo-Won;Kim, Hyun-Su
    • Journal of Korean Association for Spatial Structures
    • /
    • v.21 no.4
    • /
    • pp.73-80
    • /
    • 2021
  • A mid-story isolation system was proposed for seismic response reduction of high-rise buildings and presented good control performance. Control performance of a mid-story isolation system was enhanced by introducing semi-active control devices into isolation systems. Seismic response reduction capacity of a semi-active mid-story isolation system mainly depends on effect of control algorithm. AI(Artificial Intelligence)-based control algorithm was developed for control of a semi-active mid-story isolation system in this study. For this research, an practical structure of Shiodome Sumitomo building in Japan which has a mid-story isolation system was used as an example structure. An MR (magnetorheological) damper was used to make a semi-active mid-story isolation system in example model. In numerical simulation, seismic response prediction model was generated by one of supervised learning model, i.e. an RNN (Recurrent Neural Network). Deep Q-network (DQN) out of reinforcement learning algorithms was employed to develop control algorithm The numerical simulation results presented that the DQN algorithm can effectively control a semi-active mid-story isolation system resulting in successful reduction of seismic responses.

Design of Compact Isolation Network of Marchand Balun Using CRLH Transmission Line (CRLH 전송선을 이용한 Marchand 발룬의 소형 격리 회로 설계)

  • Moon, Byeong-Taek;Han, Jung-Hoon;Myung, Noh-Hoon
    • The Journal of Korean Institute of Electromagnetic Engineering and Science
    • /
    • v.23 no.9
    • /
    • pp.1042-1047
    • /
    • 2012
  • In order to obtain balanced ports matching and isolation between balanced ports of a Marchand balun, a compact isolation network is proposed. The proposed compact isolation network is designed using composite right/left-hand (CRLH) transmission line and compact phase inverter using CRLH transmission line unit cell. Also, design method and analysis of proposed isolation network are presented. The sizes of the proposed isolation networks are significantly reduced to $0.11{\lambda}_g$ and $0.07{\lambda}_g$ compared with the conventional isolation network of $0.5{\lambda}_g$. The Marchand balun is operated at 2.45 GHz and is demonstrated through excellent experimental results.

Active vibration isolation of a hydraulic system using the hetero-synaptic neural network (헤테로-시넵틱 신경회로망을 이용한 유압시스템의 진동제어)

  • 정만실;조동우
    • Proceedings of the Korean Society of Precision Engineering Conference
    • /
    • 1995.04b
    • /
    • pp.273-277
    • /
    • 1995
  • Many hudraulic components have nonlinearities to some extent. These nonlinearities often cause the time delay, thus degrading the performance of the hydraulic control systems and making it difficult to modelthem. In this paper, a new vibration isolation control algorithm that eliminates the necessity of a sophiscated modeling of hydraulic system was proposed. The algotithm is a hybrid type control shecheme consisting of a linear controller and a hetero-synaptic neural network controller. Using this control scheme, simulations and experiments were performed for 1 DOF(Degree of freedom) and 2 DOF vibration isolation. The hybrid type control algorithm can isolate the base vibration signifcantly rather than linear control algorithm. And from the weights in hetero-synaptic neural network, we can get the 2nd equivalent differentialmodel of the hydraulic control system with on-line control operation. This equivalent model provides us with much information, such as stability and the characteristics of the control system.

  • PDF

An Efficient Peer Isolation Prevention Scheme in Pure P2P Network Environments (순수 P2P 네트워크 환경에서의 효율적인 피어 고립 방지 기법)

  • Kim Young-jin;Eom Young Ik
    • The KIPS Transactions:PartC
    • /
    • v.11C no.7 s.96
    • /
    • pp.1033-1042
    • /
    • 2004
  • According to the arbitration mechanism among the peers in the network, the P2P networking environments can be classified into hybrid P2P networking environments and pure P2P networking environments. In hybrid P2P networking environments, each peer gets continual services from the servers that arc operational most of the time, and so, network isolation does not occur because every peer can always keep connection to the server. In pure P2P networking environments, however, every peer directly connects to another peer without server intervention, and so, network isolation can occur when the per mediating the connection is terminated. In this paper, we propose a scheme for each peer to keep connection information of other peers by maintaining IDs of its neighbor peers, to reconnect to another peers when the mediating peer fails to work. and, for efficiency. to balance the number of connections that should be maintained by each peer. With our mechanism, each pier in the network can continuously maintain connection to the network and get seamless services from other peers. Through the simulation, we ascer-tained that network isolation does not occur in the pure P2P network adopting our mechanism and that our mechanism distributes and balances the connections that are maintained by each peer. We also analyzed the total network traffic and the mean number of hops for the connections made by each peer according to the recommended number of connections that is established at system setup time.

Implementation of Performance Isolation with Network Virtualization in SR-IOV (SR-IOV에서 네트워크 가상화를 통한 Performance Isolation의 구현)

  • Ahn, Sung-Won;Park, Dae-Young;Lee, Jong-Won;Yoo, Chuck
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2011.06d
    • /
    • pp.194-197
    • /
    • 2011
  • 네트워크 가상화 기술은 하드웨어적인 제약사항을 완화시켜 다양한 서비스를 제공하는 네트워크 토폴로지를 구성할 수 있도록 하는 기술로써, 미래 인터넷 환경과 클라우드 컴퓨팅을 지원 할 수 있는 기술이다. 또한 가상화된 네트워크를 제공하기 위한 소프트웨어 기반의 라우터는 하드웨어의 라우터보다 상대적으로 비용이 저렴하고 높은 유연성과 유지 보수성을 갖는다. 소프트웨어 기반의 라우터를 통하여 물리적인 네트워크 위에서 각기 다른 서비스를 제공하는 다양한 가상 네트워크들을 공존하게 하고, 다양한 서비스를 효과적으로 제공하기 위해서는 각 네트워크의 독립성과 서비스의 품질 제어가 필요하다. 이 논문에서는 네트워크 가상화를 통하여 각 가상 네트워크들의 독립성을 보장하는 Network Isolation 기술과 QoS 보장을 위한 동적인 대역폭 조절을 제공하는 Performance Isolation 기술을 제안한다. 이를 통하여 기존 하드웨어 라우터에서는 제공되지 않은 높은 유연성 과 다양한 응용, 비용의 절감, 유지 보수의 용이성 등을 제공 할 수 있다.

Enhanced OLSR for Defense against DOS Attack in Ad Hoc Networks

  • Marimuthu, Mohanapriya;Krishnamurthi, Ilango
    • Journal of Communications and Networks
    • /
    • v.15 no.1
    • /
    • pp.31-37
    • /
    • 2013
  • Mobile ad hoc networks (MANET) refers to a network designed for special applications for which it is difficult to use a backbone network. In MANETs, applications are mostly involved with sensitive and secret information. Since MANET assumes a trusted environment for routing, security is a major issue. In this paper we analyze the vulnerabilities of a pro-active routing protocol called optimized link state routing (OLSR) against a specific type of denial-of-service (DOS) attack called node isolation attack. Analyzing the attack, we propose a mechanism called enhanced OLSR (EOLSR) protocol which is a trust based technique to secure the OLSR nodes against the attack. Our technique is capable of finding whether a node is advertising correct topology information or not by verifying its Hello packets, thus detecting node isolation attacks. The experiment results show that our protocol is able to achieve routing security with 45% increase in packet delivery ratio and 44% reduction in packet loss rate when compared to standard OLSR under node isolation attack. Our technique is light weight because it doesn't involve high computational complexity for securing the network.

A Study on a Fault Detection and Isolation Method of Nonlinear Systems using SVM and Neural Network (SVM과 신경회로망을 이용한 비선형시스템의 고장감지와 분류방법 연구)

  • Lee, In-Soo;Cho, Jung-Hwan;Seo, Hae-Moon;Nam, Yoon-Seok
    • Journal of Institute of Control, Robotics and Systems
    • /
    • v.18 no.6
    • /
    • pp.540-545
    • /
    • 2012
  • In this paper, we propose a fault diagnosis method using artificial neural network and SVM (Support Vector Machine) to detect and isolate faults in the nonlinear systems. The proposed algorithm consists of two main parts: fault detection through threshold testing using a artificial neural network and fault isolation by SVM fault classifier. In the proposed method a fault is detected when the errors between the actual system output and the artificial neural network nominal system output cross a predetermined threshold. Once a fault in the nonlinear system is detected the SVM fault classifier isolates the fault. The computer simulation results demonstrate the effectiveness of the proposed SVM and artificial neural network based fault diagnosis method.

An Efficient Peer Connection Scheme for Pure P2P Network Environments (순수 P2P 네트워크 환경을 위한 효율적인 피어 연결 기법)

  • 김영진;엄영익
    • Journal of KIISE:Information Networking
    • /
    • v.31 no.1
    • /
    • pp.11-19
    • /
    • 2004
  • P2P network environments provide users with direct data transmission and sharing facilities and those environments can be classified into hybrid P2P network environments and pure P2P network environments according to the arbitration mechanism among the peers in the network. In hybrid P2P network environments, there exists a server that maintains index information for the data to be shared and network isolation does not occur because every peer always keeps connection to the server. In pure P2P network environments, however, each peer directly connects to another peer and gets services without server intervention, and so, network isolation can occur when the mediating peer fails to work. In this paper. we propose a scheme for each peer to keep connection to other peers continuously by maintaining IP addresses of its neighbor peers and connecting to the peers when the mediating peer fails to work. Although the P2P application that uses our proposed framework should obtain one or more IP addresses of the neighbor peers manually, after instantiation, the application can do its job while maintaining connection to the network continuously and automatically. To evaluate our proposed scheme, we measured and analyzed the time for a peer to reconnect to the network when the mediating peer fails and the network isolation occurs.

Efficient Slice Allocation Method using Cluster Technology in Fifth-Generation Core Networks

  • Park, Sang-Myeon;Mun, Young-Song
    • Journal of information and communication convergence engineering
    • /
    • v.17 no.3
    • /
    • pp.185-190
    • /
    • 2019
  • The explosive growth of data traffic and services has created cost challenges for networks. Studies have attempted to effectively apply network slicing in fifth generation networks to provide high speed, low latency, and various compatible services. However, in network slicing using mixed-integer linear programming, the operation count increases exponentially with the number of physical servers and virtual network functions (VNFs) to be allocated. Therefore, we propose an efficient slice allocation method based on cluster technology, comprising the following three steps: i) clustering physical servers; ii) selecting an appropriate cluster to allocate a VNF; iii) selecting an appropriate physical server for VNF allocation. Solver runtimes of the existing and proposed methods are compared, under similar settings, with respect to intra-slice isolation. The results show that solver runtime decreases, by approximately 30% on average, with an increase in the number of physical servers within the cluster in the presence of intra-slice isolation.