Electronics and Telecommunications Research Institute

Dong Il Seo

Yong Hyuk Moon

Seungmin Lee

Hyeok Chan Kwon

Hwan Mook Kim

Sang Ho Lee

Tae Whan Yoo

Seung Hyun Yoon

Sang-Woo Lee

Byeong Cheol Choi

Sun Me Kim

Nam Seok Ko

Jea Hoon Yu

Won Joo Park

Taek Yong Nam

Sung Hyuk Byun

Sokjoon Lee

Sang Ki Kim

Myung Eun Kim

Jae Hoon Nah

Youn Seo Jeong

Kwang Sik Kim

A network infrastructure system implements data sharing and processing by using a network infrastructure to which an application terminal or application server constituting an application domain is connected in a shared manner, includes a plurality of network infrastructure nodes storing, processing, sharing data, wherein each of the plurality of network infrastructure nodes includes a data processing module including a data transfer function, a data distribution function, a data processing function, and a data sharing function which are provided to at least one of the application terminal and the application server.

Network infrastructure system and method for data processing and data sharing using the same

A method for generating smart contents includes contents protected by a digital right management (DRM) technology; and metadata including information necessary to use the contents. Further, the method includes a smart code for protecting copyright of the contents and position information which the smart code is downloaded.

Method for generating smart contents, method for executing smart contents and method for providing N-screen service of smart contents

An authentication apparatus for detecting and preventing a source address spoofing packet, includes a packet reception unit configured to receive a packet from a previous node or a user host; a self-assurance type ID generation unit configured to generate a self-assurance type ID of a source node of the received packet; and a self-assurance type ID verification unit configured to determine whether the source address of the received packet has been spoofed. Further, the authentication apparatus includes a white list storage unit configured to store a reliable source node; a black list storage unit configured to store an unreliable source node; and a packet transmission unit configured to transmit the packet whose source has been verified through the self-assurance type ID verification unit to a next network node.

Authentication method and apparatus for detecting and preventing source address spoofing packets

An adaptive security policy based scalable video service apparatus includes a video streaming server, an adaptive security policy server and a terminal. The video streaming server receives a service demand via a network and generates an encrypted streaming data. The adaptive security policy server analyzes a media structure and the service demand, by using a service profile received from the video streaming server, so as to generate a security policy description. The terminal generates and transmits the service demand to the video streaming server or the adaptive security server, obtains the encrypted streaming data from the video streaming server and decrypts the encrypted streaming data for playback, storing and retransmission.

Adaptive security policy based scalable video service apparatus and method

A method for analyzing a security grade of an information property, and more particularly, a method by which a security grade (a risk degree in security) is analyzed objectively and quantitatively such that risk degree management of an information property can be efficiently performed, is provided. The method for analyzing a security grade of an information property includes: selecting an information property as an object of security grade analysis, among information properties for which risk degree analysis and importance evaluation in managerial, physical, and technological aspects are performed; calculating the property risk degree of the selected property based on the weighted mean of risk degrees and importance evaluation; and mapping the weighted mean of the risk degree and the importance on a 2-dimensional plane having the X-axis indicating the weighted mean of a risk degree and the Y-axis indicating importance, and based on the appearing result, determining the priority of a safeguard.

Method for analyzing security grade of information property

Provided are a system and method for coping with encrypted harmful traffic in hybrid IPv4/IPv6 networks. The system includes: an encryption key manager collecting encryption key information from a user terminal connected to the hybrid IPv4/IPv6 networks, and storing and managing the information in an encryption key database; an encryption traffic collector collecting encrypted traffic from traffic in the hybrid IPv4/IPv6 networks; an encryption key searcher searching for an encryption key used to decrypt the encrypted traffic from the encryption key database using a source IP address and a destination IP address of the encrypted traffic; a harmful traffic determiner decrypting the encrypted traffic using the encryption key and determining whether the decrypted traffic is harmful traffic; and an encryption traffic processor, if the decrypted traffic is determined to be harmful traffic, blocking the harmful traffic and, if the decrypted traffic is determined to be normal traffic, encrypting the normal traffic, and transferring the encrypted traffic to a user terminal corresponding to the destination IP address, thereby detecting and blocking an attack pattern using the encrypted harmful traffic in hybrid IPv4/IPv6 networks which cannot be detected by a conventional firewall system and more effectively protecting the networks.

System and method for coping with encrypted harmful traffic in hybrid IPv4/IPv6 networks

An apparatus and method for controlling abnormal traffic are provided. The apparatus includes: a list management unit which stores a list of Internet Protocols (IPs) transmitting normal packets and, conditionally, announces that the current packet traffic is packet traffic generated by a registered IP; a channel allocation unit which allocates channels to the input packets in such a manner that a packet determined as being normal is given priority over a packet determined as being abnormal, transmits the input packets to a network node, and transmits IP information regarding the input packets that are determined as being normal; a success rate determination unit which determines a service success rate for packets received from a registered IP; and a channel number adjustment unit which transmits the predetermined command to the channel allocation unit so that the channel allocation unit can adjust the number of channels reserved for allocation to normal packets.

Apparatus and method for controlling abnormal traffic

Growing community of inventors

Daejeon, South Korea

Dong Il Seo