Abstract: A method for processing traffic using a multi-network interface card and a network device employing the method are provided. The network device includes a first network card configured to classify and filter traffic, a second network card configured to inspect and process the traffic classified by the first network card, a processor configured to manage the first and second network cards and apply network policies to the first and second network cards, respectively, and a memory configured to store the network policies.

Abstract: A method of controlling traffic, particularly, a method of setting and executing a traffic control policy in which a time condition is additionally combined is provided. At any specific step of a network that executes a time-based policy, an execution time point of the time-based policy can be determined. Further, a network service provider can provide various application services to a network user using a time-based policy.

Abstract: Provided are a packet processing apparatus and method for detecting a duplicate acknowledgement (ACK) packet. The packet processing apparatus initiates a session and then detects a retransmission packet and a duplicate ACK packet from input/output packets using statistic information related to packet retransmission. Accordingly, unnecessary traffic generated regardless of a user's intension can be blocked.

Abstract: Provided is a network duplexing apparatus and method. The network duplexing apparatus includes a plurality of network interface units configured to store information of a flow flowing in the network interface units, provide the information of the flow to a master unit when the flow corresponds to an asymmetric flow, and request information of an opposite side flow of the flow from the master unit to receive the requested information, and the master unit configured to store the information of the flow provided from the network interface unit, determine whether the information of the opposite side flow of the flow is stored, and provide the information of the opposite side flow to the network interface unit when the information of the opposite side flow is stored.

Abstract: Provided is a network duplexing apparatus and method. The network duplexing apparatus includes a plurality of network interface units configured to store information of a flow flowing in the network interface units when the information of the flow is not generated, provide the information of the flow to a master unit when the flow corresponds to an asymmetric flow, and request information of an opposite side flow of the flow from the master unit to receive the requested information, and the master unit configured to store the information of the flow provided from the network interface unit, determine whether the information of the opposite side flow of the flow is stored, and provide the information of the opposite side flow to the network interface unit when the information of the opposite side flow is stored.

Abstract: The present invention provides an apparatus and a method for an integrated developing environment for a network application, including: an application storing part to store an application produced by a user; an application attribute managing part to manage attribute information for the application; a target code creating part to compile the application stored in the application storing part based on the attribute information stored in the application attribute managing part and create a target code corresponding to the compiled application; and a code loading part to mount the target code created by the target code creating part in hardware.

Abstract: Disclosed are a method and apparatus for collecting harmful information that analyze a plurality of packets collected in real time from a network and collect information on harmful sites. The harmful information collecting method includes receiving a plurality of packets collected by at least one packet collecting unit, analyzing whether the received packets include harmful information, extracting information on harmful sites from which corresponding packets are transmitted if the analyzed packets include harmful information, and storing the extracted information on harmful sites in a database.

Abstract: An apparatus for analyzing traffic is provided. The apparatus may precisely identify and analyze web traffic through 5 tuple-, HTTP-, and request/response pair-based packet analysis by monitoring the correlation between sessions.

Abstract: Provided is a network duplexing apparatus and method. The network duplexing apparatus includes a plurality of network interface units configured to store information of a flow flowing in the network interface units when the information of the flow is not generated, provide the information of the flow to a master unit when the flow corresponds to an asymmetric flow, and request information of an opposite side flow of the flow from the master unit to receive the requested information, and the master unit configured to store the information of the flow provided from the network interface unit, determine whether the information of the opposite side flow of the flow is stored, and provide the information of the opposite side flow to the network interface unit when the information of the opposite side flow is stored.

Abstract: Provided is a network duplexing apparatus and method. The network duplexing apparatus includes a plurality of network interface units configured to store information of a flow flowing in the network interface units, provide the information of the flow to a master unit when the flow corresponds to an asymmetric flow, and request information of an opposite side flow of the flow from the master unit to receive the requested information, and the master unit configured to store the information of the flow provided from the network interface unit, determine whether the information of the opposite side flow of the flow is stored, and provide the information of the opposite side flow to the network interface unit when the information of the opposite side flow is stored.

Abstract: A method of virtualization of a network application in a network interface card is provided. The network application virtualization method includes: classifying an input packet; mapping the classified packet to a network application; creating a virtual port allocated to the network application; and switching the mapped packet to the virtual port.

Abstract: A method of controlling traffic, particularly, a method of setting and executing a traffic control policy in which a time condition is additionally combined is provided. At any specific step of a network that executes a time-based policy, an execution time point of the time-based policy can be determined. Further, a network service provider can provide various application services to a network user using a time-based policy.

Abstract: Disclosed are an apparatus and a method for providing integrated developing environment for a network application using various network processors, and a server using the same. The apparatus for integrally developing a network application, includes: an application storing part configured to store an application produced by a user; an application attribute managing part configured to manage attribute information for the application, including input information, output information, and information regarding a connection between an input and an output; a target code creating part configured to compile the application stored in the application storing part based on the attribute information stored in the application attribute managing part and create a target code corresponding to the compiled application; and a code loading part configured to mount the target code created by the target code creating part in hardware.

Abstract: Provided are a packet processing apparatus and method for detecting a duplicate acknowledgement (ACK) packet. The packet processing apparatus initiates a session and then detects a retransmission packet and a duplicate ACK packet from input/output packets using statistic information related to packet retransmission. Accordingly, unnecessary traffic generated regardless of a user's intension can be blocked.

Abstract: A method for processing traffic using a multi-network interface card and a network device employing the method are provided. The network device includes a first network card configured to classify and filter traffic, a second network card configured to inspect and process the traffic classified by the first network card, a processor configured to manage the first and second network cards and apply network policies to the first and second network cards, respectively, and a memory configured to store the network policies.

Abstract: An apparatus for analyzing traffic is provided. The apparatus may precisely identify and analyze web traffic through 5 tuple-, HTTP-, and request/response pair-based packet analysis by monitoring the correlation between sessions.

Abstract: An apparatus and method for detecting abnormal traffic are provided. According to the apparatus and method, it is possible to easily detect abnormal traffic by analyzing a traffic image that is generated based on traffic statistics data provided by an external traffic analysis device or an internal traffic analysis device without the need to access a traffic analysis device that is hard to access or manipulate.

Abstract: A packet processing apparatus and method are provided. According to the packet processing apparatus and method, it is possible to manufacture a product within a short period of time in a case in which there are signals that are not provided by an existing network processing unit (NPU) through a bridging algorithm that is realized in a field programmable gate array (FPGA).

Abstract: An apparatus for processing different types of packets using various interfaces and method thereof. The apparatus uses a general-purpose processor, instead of a particular network processor, and uses a general open source software compiler without the use of a particular compiler and an application program interface (API) for use in processing a specific packet, and accordingly, it is easy to reuse software when upgrading hardware and software.

Abstract: Provided is a technique of step-by-step performing a plurality of traffic control policies by differentiating policies to be performed for each subscriber and establishing policy layers requiring a relatively long time to process traffic at later stages, thereby preventing a traffic control system from processing unnecessary traffic, reducing the load of the traffic control system upon processing traffic, and improving the performance of the traffic control system.