Electronics and Telecommunications Research Institute

Other

Soo Hyung Lee

Jong Soo Jang

Sung Won Sohn

Jung Chan Na

Beom Hwan Chang

Hyun Joo Kim

Geon Lyang Kim

Jin Oh Kim

Hyo Chan Bang

Seon Gyoung Sohn

Dong Young Kim

Kyeong Tae Kim

Won Tae Kim

Hyung Kook Jun

Jong Hyun Kim

Chi Yoon Jeong

Seung Min Park

Won Joo Park

Hyochan Bang

Kyung Il Kim

Jong Ho Ryu

Jae Hyuk Kim

Yong Yeon Kim

Dongyoung Kim

Je Man Park

Seon Gyoung Shon

A communication connecting method between nodes through a network, includes: storing communication connection information acquired through searching for communication entities of other nodes; determining whether communication connection information on a communication entity of a connection target node exists by searching for the stored communication connection information; and configuring communication connection with the communication entity of the connection target node based on the determination result.

Node and communication connecting method between nodes

A node constituting data distribution service (DDS) structure according to an exemplary embodiment of the present invention includes a first DDS application including a first DCPS layer and a first real-time publish-subscribe (RTPS) layer and a second DDS application including a second DCPS layer communicated with the first RTPS layer.

DDS structure with scalability and adaptability and node constituting the same

There are provided a network security state visualization device and method, the device including: a security event collector collecting original security event information from network security apparatuses; a security event analyzer analyzing the original security event information collected by the security event collector and extracting characteristic data corresponding to a security event; and a three-dimensional visualization display unit visualizing a correlation between the characteristic data extracted by the security event analyzer as a three-dimensional screen to be displayed.

Method and apparatus for visualizing network security state

A network status display device using a traffic pattern map is provided. The device includes: a traffic feature extractor extracting a port number of a port having the maximum occupancy of micro-flows and macro-flows for each network address section and host address section with reference to traffic information collected by an external traffic information collector, calculating and storing an occupancy rate of the port; a traffic status display unit making a network traffic pattern map expressed by destination-source network addresses and a host traffic pattern map expressed by destination-source host addresses and displaying the port information stored in the traffic feature extractor on the network traffic pattern map and the host traffic pattern map; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the network traffic pattern map and the host traffic pattern map and detecting and reporting a harmful or abnormal traffic which causes the abnormal network status. The device can determine whether the anomaly deteriorating the network performance exists and can easily and quickly detect the harmful or abnormal traffic which causes the anomaly by the use of the port information of the port having the maximum occupancy of the micro-flows and the macro-flows for each network address section and each host address section.

Network status display device and method using traffic pattern map

A network status display device using a traffic flow-radar is provided. The network status display device includes: a traffic feature extractor calculating flow occupancy rates for total flows, micro-flows and macro-flows with respect to each of a plurality of traffic features with reference to traffic information for each traffic feature such as a network address, a port, a transmitting/receiving host address or a protocol collected by an external traffic information collector, and storing the calculation result; a traffic status display unit displaying the flow occupancy rates for each traffic feature calculated and stored in the traffic feature extractor on a radar with dots for each traffic feature; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the radar for each traffic feature, detecting and reporting the type of the abnormal network status and harmful or abnormal traffic that generates the abnormal network status, when the abnormal status occurs.

Network status display device and method using traffic flow-radar

Provided is an apparatus for detecting a network attack situation. The apparatus includes an alarm receiver receiving a plurality of alarms raised in a network to which the alarm receiver is connected, converting the alarms into predetermined alarm data, and outputting the alarm data; an alarm processor analyzing an attack situation in the network based on attributes of the alarm data and a number of times that the alarm data is generated; a memory storing basic data needed to analyze the state of the network and providing the basic data to the alarm processor; and an interface transmitting the result of the analysis by the alarm processor to an external device, receiving a predetermined critical value from the external device, which is a basis for determining the occurrence of the attack situation, and outputting the critical value to the alarm processor such that the alarm processor can store the critical value in the memory. Equal numbers of hash engines and detection engines for processing the alarms in the network to the number of data groups classified as network attack situations are formed in a line. Therefore, a network attack situation can be detected in real time based on a great number of alarms indicating intrusion detection.

Apparatus and method of detecting network attack situation

Provided is an apparatus for detecting and visualizing anomalies in network traffic which includes a traffic information storing portion storing information on network traffic, a traffic state display portion presenting a status of the network traffic generated for a predetermined threshold time based on the information on network traffic on an orthogonal coordinates system in a form of a graph connecting at least one point data as a coordinate value, and a traffic anomalies determination portion determining an existence of anomalies in the network traffic based on a shape of the graph.

Apparatus and method for detecting and visualizing anomalies in network traffic

Disclosed is a communication buzzer. The communication buzzer comprises a nonconductive magnetic piece having substantially a cup-shaped configuration so that it possesses a bottom wall portion and a main wall portion which extends upward from the bottom wall portion; a magnetizable shaft securely fixed to the bottom wall portion of the nonconductive magnetic piece and projecting upward and concentrically with the main wall portion of the nonconductive magnetic piece; an electromagnetic actuator fitted around the magnetizable shaft for magnetizing the magnetizable shaft when current is supplied thereto and for demagnetizing the magnetizable shaft when a current supply is shut off; a conductive piece for providing a current path connected to the electromagnetic actuator, the conductive piece having a first end exposed to the outside, a second end brought into contact with the electromagnetic actuator and a middle portion extending through the bottom wall portion of the nonconductive magnetic piece; and a vibrating plate separated by a predetermined distance from an upper end of the magnetizable shaft, the vibrating plate vibrating as the magnetizable shaft is repeatedly magnetized and demagnetized, thereby generating a sound wave.

Communication buzzer

Growing community of inventors

Daejeon, South Korea

Soo Hyung Lee