• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제12권8호
• /
• pp.3946-3965
• /
• 2018

Network anomaly detection in Software Defined Networking, especially the detection of DDoS attack, has been given great attention in recent years. It is convenient to build the Traffic Matrix from a global view in SDN. However, the monitoring and management of high-volume feature-rich traffic in large networks brings significant challenges. In this paper, we propose a moving window Principal Components Analysis based anomaly detection and mitigation approach to map data onto a low-dimensional subspace and keep monitoring the network state in real-time. Once the anomaly is detected, the controller will install the defense flow table rules onto the corresponding data plane switches to mitigate the attack. Furthermore, we evaluate our approach with experiments. The Receiver Operating Characteristic curves show that our approach performs well in both detection probability and false alarm probability compared with the entropy-based approach. In addition, the mitigation effect is impressive that our approach can prevent most of the attacking traffic. At last, we evaluate the overhead of the system, including the detection delay and utilization of CPU, which is not excessive. Our anomaly detection approach is lightweight and effective.

• Journal of the Korean Data and Information Science Society
• /
• 제26권6호
• /
• pp.1593-1600
• /
• 2015

A control chart is very useful in monitoring various production process. There are many situations in which the simultaneous control of two or more related quality variables is necessary. We construct bivariate Shewhart control charts based on the trace of the product of the estimated variance-covariance matrix and the inverse of the in-control matrix and investigate the properties of bivariate Shewart control charts with VSI procedure for monitoring covariance matrix in term of ATS (Average time to signal) and ANSW (Average number of switch) and probability of switch, ASI (Average sampling interval). Numerical results show that ATS is smaller than ARL. From examining the properties of switching in changing covariances and variances in ${\Sigma}$, ANSW values show that it does not switch frequently and does not matter to use VSI procedure.

• Journal of the Korean Data and Information Science Society
• /
• 제23권4호
• /
• pp.859-866
• /
• 2012

Some switching properties of multivariate control charts are investigated when the interval between two consecutive sample selections is not fixed but changes according to the result of the previous sample observation. Many articles showed that the performances of variable sampling interval control charts are more efficient than those of fixed sampling interval control charts in terms of average run length (ARL) and average time to signal (ATS). Unfortunately, the ARL and the ATS do not provide any information on how frequent a switch is being made. We evaluate several switching properties of two sampling interval Shewhart and CUSUM procedures for controlling mean vector of correlated quality variables.

• 통합자연과학논문집
• /
• 제12권3호
• /
• pp.78-84
• /
• 2019

In many cases, the quality of a product is determined by several correlated quality variables. Control charts have been used for a long time widely to control the production process and to quickly detect the assignable causes that may produce any deterioration in the quality of a product. Numerical switching performances of multivariate cumulative sum control chart for simultaneous monitoring all components in the dispersion matrix ${\Sigma}$ under multivariate normal process $N_p({\underline{\mu}},{\Sigma})$ are considered. Numerical performances were evaluated for various shifts of the values of variances and/or correlation coefficients in ${\Sigma}$. Our computational results show that if one wants to quick detect the small shifts in a process, CUSUM control chart with small reference value k is more efficient than large k in terms of average run length (ARL), average time to signal (ATS), average number of switches (ANSW).

• 제어로봇시스템학회논문지
• /
• 제11권8호
• /
• pp.709-716
• /
• 2005

As a way to build more efficient and intelligent container cranes for todays hub ports, communication networks are used to interconnect numerous sensors, actuators, controllers, and operator switches and consoles that are spatially distributed over a crane. Various signals such as sensor values and operator's commands are digitized and broadcast on the network instead of using separate wiring cables. This not only makes the design and manufacturing of a crane more efficient, but also easier implementation of intelligent control algorithms. This paper presents the performance evaluation of CAN(Controller Area Network), TTP(Time Triggered Protocol) and Byteflight that can be used for cranes. Through discrete event simulation, several important quantitative performance factors such as the probability of a transmission failure, average system delay (data latency) and maximum system delay have been evaluated.

• 전력전자학회논문지
• /
• 제18권2호
• /
• pp.199-204
• /
• 2013

Recently, the demand for fuel efficient electric vehicles (EVs) and hybrid electric vehicles (HEVs) has been growing globally. Due to the increased number of switching devices in the electrified vehicles, the probability of the semiconductor device failure is much higher than in other application areas. A sudden failure in one of the power switches and insufficient power management ability in the systems not only decreases system performance, but also leads to critical safety problems. In this paper, novel switch open circuit fault detection method is proposed, and the proposed approach is verified by experiments.

• 한국시뮬레이션학회논문지
• /
• 제11권1호
• /
• pp.45-58
• /
• 2002

In the wireless communication systems of the next generation, the hard handover may frequent]y occur between the existing 2G(2nd generation) and the 3(1(3rd generation). When it occurs between the 2G and the 3G, the call setup procedure will be added to MT(Mobile Terminal), the relay bases in 2G and 3G, and the switches. It causes total time to handle the hangover to increase. Therefore, the forced termination probability may be increased since relative time decreases. In this paper, we propose a method to decrease the forced termination. The method execute the handover procedure with speed and direction of the MT preestimated in the inner cell when MT enters the boundary cell.

• International Journal of Computer Science & Network Security
• /
• 제22권2호
• /
• pp.341-347
• /
• 2022

This research is designed to help and offer hold up to complete the requirements of aged and disable in a home. The control approach and the tone approach are used to manage the house appliances. The major organize system implementation in technology of wireless to offer distant contact from a phone Internet Protocol connectivity for access and calculating strategy and appliance remotely. The planned system no need a committed server PC with value of parallel systems and offers a new communication-protocol to observe and control a house environment with more than just the switch functionality. To express the possibility and efficiency of this system, devices like as lights switches, power plugs, and motion-sensors have been included with the planned home control system and supply more security manage on the control with low electrical energy activate method. The rank of switches is corresponding in all this control system whereby all user interfaces indicate the real time existing status. This system planned to manage electrical-appliances and devices in house with reasonably low cost of design, user friendly interface, easily install and provide high security. Research community generally specified that the network "Reconnaissance Attacks" in IPv6 are usually impossible due to they will take huge challenge to carry out address scanning of 264 hosts in an IPv6 subnet."It being deployed of IPv6 shows that it definitely enhances security and undermines the probability". This research of the IPv6 addressing-strategies at present utilizes and planned a new strategy and move toward to "mitigate reconnaissance attacks".

• 한국정보과학회논문지:정보통신
• /
• 제32권2호
• /
• pp.244-253
• /
• 2005

본 논문에서는, n개의 입출력 포트를 가진 스위치로 구성된 스위치 라우터의 성능 예측 모형을 제안하고, 스위치에 장착된 버퍼의 개수 증가에 따른 성능 향상 추이를 분석하였다. Buffered 스위치기법은 크로스바 스위치 내부의 데이타 충돌 문제를 효과적으로 해결할 수 있는 방법으로 널리 알려져 있다. 제안한 성능 예측 모형은 먼저 네트워크 내부임의 스위치 입력 단에 유입되는 데이타 패킷이 스위치 내부에서 전송되는 유형을 확률적으로 분석하여 수립되었다. 제안한 모형은 스위치에 장착된 버퍼의 개수와 무관하게 출력 버퍼를 장착한 스위치의 성능, 즉 네트워크 성능 평가의 두 가지 주요 요소인 네트워크 정상상태 처리율(Normalized Throughput, NT)과 네트워크 지연시간(Network Delay)의 예측이 가능하고, 나아가서 이들로 구성된 네트워크의 성능 분석에 적용이 용이하다. 제안한 수학적 성능 분석 연구의 실효성 검증을 위하여 병행된 시뮬레이션 결과는 상호 미세한 오차 범위 내에서 모형의 예측 데이타와 일치하는 결과를 보여 분석 모형의 타당성을 입증하였다. 또한, 분석 결과 스위치 내부에 많은 버퍼를 장착할수록 정상상태 처리율의 증가율은 감소하고, 네트워크 지연시간은 증가하는 것으로 나타났다.

• 한국통신학회논문지
• /
• 제30권4B호
• /
• pp.162-169
• /
• 2005

패킷 스위치로부터 발생되는 트래픽이 전통적인 트래픽 모델인 포와송 분포와 마코비안 프로세스로 가정된 네트워크로부터 발생되는 트래픽과 상당히 차이가 나는 self-similar 현상을 보이고 있다는 것이 알려지고 있고 또한 기존에 제안된 대부분의 호 수락 제어 방법에 대한 성능 분석은 스위치가 단독으로 존재한다고 가정하여 이루어지고 있다. 그러나 실제 트래픽이 목적지에 도달하기 위해서는 라우팅을 통하여 여러 스위치들을 거쳐야하므로 호 수락 제어 방법에 대한 성능 분석은 다단으로 연결된 스위치로 확장되는 것이 필요하다. 본 논문을 통하여 기존에 제안된 호 수락 제어 방법이 단일 스위치 환경 하에서는 적절하게 동작이 이루어지나 다단으로 스위치가 연결되어 있는 환경에서는 뒤에 위치하고 있는 스위치에 필요 이상의 유효 대역폭을 할당 한다는 것을 알 수 있다. 그러므로 본 논문에서는 공유 버퍼 메모리를 갖는 다단 네트워크 스위치 환경에서 셀 손실률과 이용률 그리고 각 스위치 출력포트의 self-similarity를 분석하여 self-similar 트래픽 환경에서 효과적으로 대역폭을 할당할 수 있는 호 수락 제어 방법을 제안한다.