Abstract: A processor partitions a deep neural network having a plurality of exit points and at least one partition point in a branch corresponding to each of the exit points, for distributed processing in an edge device and a cloud. The processor sets environmental variables and training variables for training, selects an action to move at least one of an exit point and a partition point from a combination of the exit point and the partition point corresponding to a current state, performs the training by accumulating experience data using a reward according to the selected action and then moves to a next state, and outputs a combination of an optimal exit point and a partition point as a result of the training.

Abstract: A processor partitions a deep neural network having a plurality of exit points and at least one partition point in a branch corresponding to each of the exit points, for distributed processing in an edge device and a cloud. The processor sets environmental variables and training variables for training, selects an action to move at least one of an exit point and a partition point from a combination of the exit point and the partition point corresponding to a current state, performs the training by accumulating experience data using a reward according to the selected action and then moves to a next state, and outputs a combination of an optimal exit point and a partition point as a result of the training.

Abstract: Disclosed herein are an apparatus and method for object networking. The apparatus includes one or more processors and executable memory for storing at least one program executed by the one or more processors. The at least one program registers a real object included in the scene recognized by the virtualization display device of a user as an object of interest, generates a local network using local information pertaining to the object of interest, and generates a global network of multiple objects of interest from the local networks of the multiple objects of interest using global information pertaining to the object of interest.

Abstract: Disclosed are a method and apparatus for load balancing by using multiple interfaces. The load balancing method using multiple interfaces and performed by the load balancing apparatus includes acquiring information about a plurality of wireless communication interfaces supported by a terminal, measuring transport qualities of the plurality of wireless communication interfaces, calculating data transfer rates of the plurality of wireless communication interfaces based on the transport qualities, and simultaneously transporting data based on the transfer rates through the plurality of wireless communication interfaces.

Abstract: A method and an apparatus of integrative network management, which provide connection between private networks and real-time connection according to various policies depending on security or a quality of service (QoS), manages information required to provide the connection, and controls connection by using the managed information in order to defend and cope with various types of cyber attacks and fundamentally invalidate a cyber attack.

Abstract: An operation method of a VPN security apparatus includes receiving a service request from a client, dynamically allocating a fake address of a VPN apparatus connected to a service server, which provides the service requested by the client, and transmitting the fake address allocated to the VPN apparatus to the client and the VPN apparatus.

Abstract: Disclosed are a method and apparatus for load balancing by using multiple interfaces. The load balancing method using multiple interfaces and performed by the load balancing apparatus includes acquiring information about a plurality of wireless communication interfaces supported by a terminal, measuring transport qualities of the plurality of wireless communication interfaces, calculating data transfer rates of the plurality of wireless communication interfaces based on the transport qualities, and simultaneously transporting data based on the transfer rates through the plurality of wireless communication interfaces.

Abstract: Disclosed are a system for managing virtual private networks (VPNs) includes: terminals configured to transmit user data; a manager configured to transmit information for concealing networks and managing the VPNs; border gateways configured to decrypt the user data and perform a network address translation (NAT) procedure and a filtering procedure on the decrypted user data based on the information; and servers configured to receive the user data subjected to the NAT procedure and the filtering procedure, wherein the filtering procedure is a procedure discarding the user data to be transferred to the servers that are not allowed so as to allow the terminals to access only the allowed servers, the NAT procedure is a procedure changing an Internet protocol (IP) address used in a first network to an IP address used in a second network, and the first network and the second network are different networks.

Abstract: A security method in a server-based mobile IP system is provided. Specifically, in the security method, general data is securely exchanged in addition to a control message that is exchanged between a mobile node and a server or between mobile nodes. Specifically, provided is a method of securely exchanging data by using a mobile node including an mPAK execution module generating necessary keys by exchanging key information with the server while performing a mutual authentication process and negotiating the security policy; and a security module setting a security policy that is negotiated with the corresponding node and applying the security policy to data according to the set security policy when transmitting the data.

Abstract: The present invention relates to a method and apparatus for performing IPv6 over IPv4 transition to improve performance of a control server. When an edge router selected by the control server according to a tunnel creation request of an IPv6 terminal receives a tunnel creation request message from the control server, the edge router transmits a tunnel creation response message for the received tunnel creation request message to the IPv6 terminal through the control server, and the edge router performs IPv6 over IPv4 transition through a tunnel created by the IPv6 terminal that received the tunnel creation response message so as to improve the performance of the control server. Therefore, loads of the control server occurred because all terminals set control tunnels to the control server can be prevented, and service extensibility due to the increase in the number of subscribers can be guaranteed.

Abstract: Provided is a method of establishing a user centric virtual network. The method includes: performing a first tunneling operation between a first tunnel end and an address translation device, which are connected to a first private network, and a tunnel relay device; performing a second tunneling operation between a second tunnel end and an address translation device, which are connected to a second private network, and the tunnel relay device; and performing a third tunneling operation between the tunnel relay device and an end client, wherein a virtual IP is allocated to each of the first and second tunnel ends, the address translation devices, the end client, and the tunnel relay device; and each of the first to third tunneling operations connects routing information on the virtual IP to a corresponding tunnel.

Abstract: In a system for providing an IPTV service, if a multicast address of an IPTV channel received from a head-end is a multicast address requested by a mobile node through a tunnel, an end router confirms a care of address (CoA) of the mobile node corresponding to the multicast address of the IPTV channel, sets the multicast address in the first header of broadcasting traffic, sets the CoA of the mobile node in the second header of the broadcasting traffic, and then sends the broadcasting traffic.

Abstract: Disclosed are a network apparatus and an operating method thereof. The network apparatus includes: a security authentication module that executes security authentication of a distributed denial of service (DDoS) attack when a predetermined packet requests access to a particular service server to which the security authentication is applied, at the time of inputting the predetermined packet; and a communication module that transmits the predetermined packet security-authenticated by the security authentication module through a transmission route of the particular service server, so as to easily defend the DDoS attack by using a pseudo state of a service procedure.

Abstract: A system for providing a video conference service is provided. The system includes a Multipoint Processor (MP) configured to process media occurring during a video conference so as to allow the processed media to be transmitted/received between user terminals; and one or more Multipoint Controller (MC) configured to control a session of a user terminal participating in a multi-participant video conference, wherein the MP and the MC are separate from each other.

Abstract: The invention relates to a method and an apparatus for controlling seamless handover between heterogeneous networks based on IPv6 over IPv4 tunneling. When IPv6 service is provided using tunneling in an IPv4 based network environment, handover of a mobile terminal between different networks is achieved through switching of an active tunnel and a standby tunnel, and thus handover between different networks is facilitated and data loss is prevented to secure continuity of service provided to the mobile terminal even when the mobile terminal hands over to a heterogeneous network.

Abstract: In order to select a conference processing device to host a video conference between conference participation devices, a video conference system selects conference processing devices that are positioned most adjacent to each of conference participation devices that participate in the video conference as candidates for a conference processing device. The video conference system forms network topology based on candidate conference processing devices and conference participation devices, and aligns candidate conference processing devices based on preset alignment reference information. The video conference system selects one of the aligned candidate conference processing devices as an optimal conference processing device to host the video conference.

Abstract: A method for configuring a closed user network (CUN) using an IP tunneling mechanism and a CUN system are disclosed. In particular, disclosed is a technique of establishing a tunnel between a tunnel end edge device (TEED) and a control server by using an IP tunneling mechanism to allow terminals connected to the TEED to perform communications by using a closed IP, enabling the TEED to provide a network address translation (NAT) function so that the TEED can perform data forwarding like a general NAT, without performing tunneling on a destination IP outside the closed IP section, to perform communication, and allowing a terminal located in an area where the TEED is not provided to directly establish a tunnel with the control server by using a client software to thereby perform communications with a terminal or a server connected to the TEED by using the closed IP.

Abstract: A tunneling-based mobility support method and apparatus is provided which supports a mobility of a mobile node in a heterogeneous network regardless of IP versions (IPv4/IPv6). The mobility support apparatus includes a load balancer, a plurality of mobility support servers, and a plurality of end routers each being TCP connected to each of the mobility support servers. When receiving a tunnel establishment request message from the mobile node, the load balancer selects one mobility supports server from a plurality of mobility support servers to control a mobility service for the mobile node. The selected mobility support server selects a plurality of tunnel end addresses of one end router from the plurality of end routers to establish an IP tunnel with the mobile node according to a predetermined criterion, forwards the tunnel establishment request message to the end router, and sends the mobile node a tunnel establishment response message including the tunnel end address of the selected end router.

Abstract: The present invention relates to tunneling an IPv6 packet through an IPIv4 network. In using a tunneling method upon transmitting an IPv6 packet in an IP network, when destination nodes desired to be communicated are located within the same IPv6 prefix network, IPv6 prefix information is added for the management of a tunnel entry. Hence, tunneling information on terminals located within the same IPv6 prefix network can be managed as one tunnel entry. Accordingly, the time consumed when retrieving a tunnel entry can be reduced.

Abstract: An apparatus and method for supporting a portable mobile VPN service are provided. The method accesses a public network to generate a security tunnel, maps the generated security tunnel and a VPN address, stands by for authentication of a mobile terminal which desires to access a VPN, authenticates a mobile terminal which desires to access the VPN, and assigns an internal address which is used in the VPN according to the authentication result.