Electronics and Telecommunications Research Institute

Sung-Won Sohn

Chee-Hang Park

Seung-Min Lee

Taek-Yong Nam

Jeong-Nyeo Kim

Bo-Heung Chung

Seon-Gyoung Sohn

Jung-Chan Na

Hyun-joo Kim

Jong-Hyun Kim

Geon-Woo Kim

Soo-Hyung Lee

Won-Joo Park

Jae-Hoon Nah

Hyo-Chan Bang

Jong-Soo Jang

Seungho Ryu

Chi-Yoon Jeong

Geon-Lyang Kim

Jong-Ho Ryu

Beom-Hwan Chang

A network correction security system. The network correction security system connected between a network node and a security-related external system, detects attacks on the network node, corrects weak parts of the performance of the network node, collects information for improving the security performance of the network node from a security-related external system, analyzes the information, monitors principal resources of the network node to detect a fault, and removes the fault according to a measure corresponding to a grade of the fault. The network correction security system carries out a recovery process when the fault has not been corrected, and recovers the functions of the network node according to a recovery mechanism when the fault has not been removed after the recovery process.

Network correction security system and method

An apparatus and method for visualizing a network condition related to a network security are provided. The apparatus includes a traffic feature extracting unit, a network condition displaying unit, and a traffic abnormal condition determining unit. The traffic feature extracting unit extracts information including source address, source port, destination address, and destination port from network traffics, selects two of the extracted information, and calculates unique dispersion degrees of two unselected information. The network condition displaying unit displays a two-dimensional cube expressed using the calculated unique dispersion degrees for the classified traffics. The traffic abnormal condition determining unit determines whether the traffics are in an abnormal condition or not based on the two-dimensional security cube.

Apparatus and method for visualizing network situation using security cube

A method for dynamically changing an intrusion detection rule in a kernel level intrusion detection system is disclosed. The method includes the steps of: a) generating a replica of the intrusion detection rule in a kernel area; b) changing the replica of the intrusion detection rule according to a request of changing the intrusion detection rule from the kernel area; and c) changing a currently applied intrusion detection rule by exchanging a value of a pointer representing the intrusion detection rule with a value of a pointer representing the changed replica of the intrusion detection rule.

Method for dynamically changing intrusion detection rule in kernel level intrusion detection system

There are provided an apparatus and method for transmitting data in a network system using network address translation. The method for transmitting data includes the steps of receiving a global network address corresponding to a local network address from a router using network address translation; encoding data using the global network address; and transmitting the encoded data to an external host on the global network via the router. Since the network address to be translated through the network address translation can be anticipated and substituted in real time during the transmission of the data, a variety of security services can be provided without significant modifications to the existing system, and accordingly, it is anticipated that the Internet protocol version 6 can be increasingly used.

Method and apparatus for transmitting data in a system using network address translation

Growing community of inventors

Daejeon, South Korea

Sung-Won Sohn