Electronics and Telecommunications Research Institute

Jung-Hee Lee

Bhum-Cheol Lee

Seung-Woo Lee

Byung-Chul Bae

Kang-Il Choi

Young-Ho Park

Sang-Min Lee

Hyun-Yong Lee

Dae-Geun Park

Sang-Woo Park

Hyun-Yong Hwang

E-Joong Yoon

Jong-Moon Lee

Oh-joon Kwon

Sang-Wook Lee

Kyung-pyo Jun

Young-sun Kim

Sung-Ryoul Lee

Young-Han Choi

Sang-Rok Lee

Hyung-Geun Oh

Ki-Wook Sohn

Kang-II Choi

Man-Soo Han

In-Tack Han

Yong-Hyun Lee

An apparatus for virtual switching includes a queue memory configured to store at least one queue; a data memory configured to store data; a mapper configured to classify the data into flows and store a point of the data in a queue mapped with the flows; a plurality of virtual machines configured to perform a process based on the data; and a virtual switch configured to extract the data from the data memory by referring to the point stored in the queue and transfer the data to the virtual machine, wherein the virtual switch transfers the data corresponding to a single queue to a single virtual machine.

Apparatus and method for virtual switching

An apparatus for parallel processing according to an example may include a queue memory configured to store one or more queues, a data memory configured to store data, a mapper configured to classify the data into flows and store a pointer of the data in a queue mapped with the flow; a plurality of processors configured to perform a process based on the data; and a distributor configured to extract the data from the data memory by referring to the pointer stored in the queue and transmit the data to the processor, wherein the distributor transmits data corresponding to a single queue to a single processor.

Apparatus and method for parallel processing

Disclosed herein are an apparatus and method for analyzing malicious code in a multi-core environment. The apparatus for analyzing malicious code includes a core setting unit for setting at least one monitoring core, on which malicious code is to be monitored, among cores of a multi-core Central Processing Unit (CPU), and executing a monitoring program on the monitoring core, a behavioral information collection unit for, when execution cores that are not set as the monitoring core execute analysis target code, collecting pieces of behavioral information using the monitoring program and a hardware debugging device, and a storage unit for storing the behavioral information.

Apparatus and method for analyzing malicious code in multi-core environment using a program flow tracer

An apparatus and method for managing a flow in a server virtualization environment, and a method of applying a QoS policy, the method including a flow processing unit configured to analyze a flow generated by a virtual machine (VM) to extract flow information, determine whether the flow is a new flow by comparing the extracted flow information with preset flow information, and apply a corresponding Quality of Service (QoS) policy to the flow, and a QoS management unit configured to, in a case in which the flow is a new flow, generate a QoS policy for the analyzed flow based on the extracted flow information and prestored virtual machine information, and transmit the generated QoS policy to the flow processing unit.

Apparatus and method for managing flow in server virtualization environment, and method for applying QOS

A network intrusion detection apparatus and method that perform Perl Compatible Regular Expressions (PCRE)-based pattern matching on the payloads of packets using a network processor equipped with a Deterministic Finite Automata (DFA) engine. The network intrusion detection apparatus includes a network processor core for receiving packets from a network, and transmitting payloads of the received packets to a Deterministic Finite Automata (DFA) engine. A detection rule converter converts a PCRE-based detection rule, preset to detect an attack packet, into a detection rule including a pattern to which only PCRE grammar corresponding to the DFA engine is applied. The DFA engine performs PCRE pattern matching on the payloads of the packets based on the detection rule converted by the detection rule converter.

Network intrusion detection apparatus and method using Perl compatible regular expressions-based pattern matching technique

Provided are a method, apparatus, and system for providing a multi-tenant cloud service, which can guarantee quality of service (QOS) in units of flows and virtual machines (VMs). A dynamic virtual flow switch includes a switch flow agent configured to receive and store virtual machine QOS information about each of a plurality of virtual machines operating in a plurality of computer servers and flow QOS information about a flow generated by the virtual machine from a virtual flow controller and a flow processing unit configured to receive the flow generated by the virtual machine and determine a QOS priority of the flow based on the stored virtual machine QOS information of the virtual machine and flow QOS information of the flow.

Switch and method for guaranteeing quality of service of multi-tenant cloud service and system having the same switch

An apparatus includes a difference extraction unit to extract a difference between a second time stamp value, which is obtained by adjusting a first time stamp value that is measured at a time of arrival of a synchronization message transmitted by the master at a Layer 3 to be synchronized in frequency with a clock of the master, and a third time stamp value, which is measured at a time of departure of the synchronization message from the master; a minimum filter to select a minimum from one or more difference values extracted by the difference extraction unit; and a delay variation calculation unit to estimate a time of arrival of a current synchronization message at the Layer 3 based on the selected minimum and calculate a delay variation.

Apparatus and method for estimating time stamp

A mobile terminal having security diagnosis functionality and a method of making a diagnosis on the security of the mobile terminal are provided. The mobile terminal includes a system check unit, an interface unit, a blacklist check unit, and a security diagnosis unit. The system check unit collects the basic information of the mobile terminal by performing a system check on the mobile terminal. The interface unit provides the basic information of the mobile terminal to a user and receives a control command from the user. The blacklist check unit checks whether at least one application installed in the mobile terminal is present in a blacklist registered on a server. The security diagnosis unit checks whether an abnormality has occurred in the corresponding application based on results of the comparison between the basic information of the mobile terminal with preset abnormality detection reference information and the control command.

Mobile terminal having security diagnosis functionality and method of making diagnosis on security of mobile terminal

A parallel processing-based time synchronization apparatus employs a double-filter structure based on parallel processing, providing more precise and reliable time synchronization between a master device and a slave device. A first filter is implemented as hardware so as to realize time synchronization despite cyclic synchronization message transmission at short intervals and the second filter is implemented as software so as to realize precise time synchronization.

Time synchronization apparatus based on parallel processing

Provided are a method and apparatus for dynamically managing hierarchical flows that more efficiently process packet traffic while maintaining compatibility with an existing packet data network in transferring both circuit traffic and packet traffic in a packet switched network. The method for dynamically managing hierarchical flows includes: receiving data packets, classifying the data packets according to attributes of the received data packets, and producing first flows; determining whether traffic of each of the first flows exceeds a predetermined bandwidth limit, and performing a packet drop process or producing second flows for first flows that exceed the bandwidth limit, according to a flow-specific policy; and performing second flow processing on the second flows according to a second flow policy. Only flows exceeding the bandwidth limit or causing congestion are hierarchically divided for management. This makes it possible to finely manage the flows without complex operations.

Method and apparatus for dynamically managing hierarchical flows

A method for scheduling an input and output buffered ATM or packet switch and, more particularly, to a method for cell-scheduling an input and output buffered switch that is adapted to a high-speed large switch is provided. The input and output buffered switch has multiple switching planes, and its structure is used to compensated for decreasing performance of the input buffered switch resulting from HOL (head-of-line) blocking of the input buffered switch. The input and output buffered switch consists of input buffer modules grouping several input ports and output ports and output buffer modules, and each input buffer module has several FIFO queues for the associated module output buffer modules. In the input and output buffered switch having multiple switching planes, cell scheduling is carried out using a simple iterative matching (SIM) method. The SIM method consists of three operations, those are, request operation, grant operation, and accepting operation, and in the SIM method, the operations are iteratively carried out several times in one cell period, thereby matching efficiency can be increased. Each input buffered module determines simultaneously multiple FIFO queues served in one cell period, so that the SIM method with multiple selection ability has higher speed operations and better performance than conventional scheduling methods.

Cell scheduling method of input and output buffered switch using simple iterative matching algorithm

A semiconductor substrate and a method of fabricating the same, and provides which the active area to be formed the active element is defined by the trench filled with any conductive polycrystal silicon in which any portion of a large number of the epitaxial layer is crystally grown on any conductive silicon substrate, and the multi-aperture silicon oxide layer is formed from the metal line to be used to the passive element or the transmitting line outside the trench, so that the interference between the passive element and the semiconductor substrate is prevented, and to attenuate the transmitting signal prevents to be attenuated in the high frequency band operation. Therefore, the semiconductor substrate for a unit active element and the MMIC to be able to operate the high frequency band is manufactured into the silicon, and thus it is advantageous to reduce the cost and enhance the yield. Silicon oxide layer is formed from the metal line to be used to the passive element or the transmitting line outside the trench, so that the interference between the passive element and the semiconductor substrate is prevented, and to attenuate the transmitting signal prevents to be attenuated in the high frequency band operation. Therefore, the semiconductor substrate for a unit active element and the MMIC to be able to operate the high frequency band is manufactured into the silicon, and thus it is advantageous to reduce the cost and enhance the yield.

Growing community of inventors

Daejeon, South Korea

Jung-Hee Lee