Abstract: Provided is a method in which a management server provides wireless LAN security policy by participating in multiple APs. The method includes a step of receiving terminal information of a terminal, which is acquired in a process of scanning broadcasting information of multiple APs, from each of the multiple APs, a step of issuing and storing a token for opening a wireless LAN data channel to each of the multiple APs on the basis of reception time points of the terminal information, a step of receiving a token request for opening a wireless LAN data channel to an AP to be accessed, selected by a terminal among the multiple APs, and a step of distributing, to the terminal, a token of the AP to be accessed corresponding to the token request.

Abstract: Provided is a matching system including a policy and rule processing unit configured to extract SC units for each application service required, combine the SC units, configure a transaction unit, and determine an amount to be charged for a transaction according to a charging rule; a matching processing unit configured to match the extracted SC units to NC units; and an NC combination processing unit configured to combine the NC units used for the matching and deliver the combination of the NC units and detailed operating conditions to the networking management system.

Abstract: An apparatus and a method for decrypting cryptogram through steps of: dividing a cryptogram received from a server into a first cryptogram and a second cryptogram; transforming the first cryptogram and the second cryptogram by using a predetermined inverse transform; and decrypting the cryptogram to generate a plaintext based on a Feistel network including XOR operations between the transformed first cryptogram and a round key generated from a secret key and between the transformed second cryptogram and the round key are provided.

Abstract: Provided is a matching system including a policy and rule processing unit configured to extract SC units for each application service required, combine the SC units, configure a transaction unit, and determine an amount to be charged for a transaction according to a charging rule; a matching processing unit configured to match the extracted SC units to NC units; and an NC combination processing unit configured to combine the NC units used for the matching and deliver the combination of the NC units and detailed operating conditions to the networking management system.

Abstract: Provided are a MapReduce apparatus and a MapReduce control apparatus and method. The MapReduce apparatus includes a map calculator configured to perform a map calculation, a combiner configured to aggregate and summarize map calculation results of the map calculator, a rack combiner configured to aggregate and summarize map calculation results of MapReduce apparatuses connected to the same rack switch according to a policy of a MapReduce control apparatus, and a reduce calculator configured to receive the aggregated and summarized results of the combiner or the rack combiner and perform a reduce calculation.

Abstract: Provided herein is a network access method and apparatus for supporting mobility of user equipment, the method including receiving information on a private IP (Internet Protocol) address for address conversion from a home network management server; receiving an LISP (Locator/ID Separation Protocol) data frame that includes a private IP address of the user equipment accessed to a current home network; converting the private IP address into a converted private IP address based on the information on a private IP address for address conversion; and transmitting data that has its basis on the LISP data frame to the home network apparatus based on the conversed private IP address, wherein the home network apparatus is an apparatus that the user equipment intends to access and that is accessed to the access home network.

Abstract: Provided are a MapReduce apparatus and a MapReduce control apparatus and method. The MapReduce apparatus includes a map calculator configured to perform a map calculation, a combiner configured to aggregate and summarize map calculation results of the map calculator, a rack combiner configured to aggregate and summarize map calculation results of MapReduce apparatuses connected to the same rack switch according to a policy of a MapReduce control apparatus, and a reduce calculator configured to receive the aggregated and summarized results of the combiner or the rack combiner and perform a reduce calculation.

Abstract: Provided herein is a network access method and apparatus for supporting mobility of user equipment, the method including receiving information on a private IP (Internet Protocol) address for address conversion from a home network management server; receiving an LISP (Locator/ID Separation Protocol) data frame that includes a private IP address of the user equipment accessed to a current home network; converting the private IP address into a converted private IP address based on the information on a private IP address for address conversion; and transmitting data that has its basis on the LISP data frame to the home network apparatus based on the conversed private IP address, wherein the home network apparatus is an apparatus that the user equipment intends to access and that is accessed to the access home network.

Abstract: A VPN (Virtual Private Network) gateway virtualizes a logical gateway corresponding to a VPC (Virtual Private Cloud) group of a connected user terminal, based on a virtual address of the user terminal, and logically connects the logical gateway to the database corresponding to the VPC group to provide VPC service to the user terminal.

Abstract: A system includes: a map-server storing EID-RLOC mapping information; an ITR receiving RLOC information on a corresponding EID from an ETR designated by the map-server based on a destination EID and a tenant identifier of a corresponding enterprise network when receiving packets for requesting allocation of computing resources from a terminal within the enterprise networks, generating an LISP data packet based on the received RLOC information and the RLOC information of the corresponding enterprise network, and transmitting the generated LISP data packet to a backbone network; and an ETR requesting the computing resources to a corresponding server within a cloud center based on the received LISP data packet to receive information on the computing resources from the server as an answer to the request when receiving the LISP data packet through the backbone network and providing the received information on the computing resources to the ITR

Abstract: A method of sensing an excessive bandwidth usage includes acquiring an information set of a network bandwidth usage, applying a plurality of excessive bandwidth use sensing techniques to the acquired information set, determining an excessive bandwidth usage, and then limiting the determined excessive bandwidth usage. Accordingly, the network bandwidth may be uniformly secured and provided by limiting the bandwidth usage that uses the excessive network band.

Abstract: A method for setting up a computing environment, which includes: storing data for setting up computing environments necessary for the update of a plurality of client terminals that are connected through a network; receiving information about computing environments that are configured on the client terminals from the client terminals; upon receiving a request for the update from the client terminals, classifying the client terminals that share the same system image; and transferring the latest version of the data for setting up the computing environments which are higher than the client terminals of the client terminals; and updating the classified client terminals with the latest version of the data.

Abstract: An apparatus for allocating a network bandwidth includes an information collection unit configured to collect flow information of a network; and a traffic check unit configured to check traffic of the collected flow information. Further, the apparatus includes a traffic respond unit configured to suppress the network bandwidth depending on a check result of the traffic; and a control unit configured to the information collection unit, the traffic check unit, and the traffic respond unit.

Abstract: The present invention provides an apparatus for optimizing traffic of packets produced in a user terminal and a remote node with a WAN link between the user terminal and the remote node. The apparatus includes a flow information table configured to have identification information about the respective packets that are managed in the apparatus, a packet processing module configured to analyze the packets to determine whether the respective packets are identified in the flow information table, and an optimization module configured to optimize the packets in compliance with the optimization option specified in the respective identified packets.

Abstract: A system for adjusting an energy measurement interval in a communication node on a network includes a measurement module configured to calculate a traffic load applied to the communication node in conformity with a traffic load measurement interval and calculate an energy consumption consumed in the communication node in conformity with an energy measurement interval. The system further comprising an information management module and a measurement interval setting module.

Abstract: An OpenFlow switch in an OpenFlow environment includes an attack determination module to collect statistical information on packet processing with respect to incoming packets to be processed in the OpenFlow switch at a predetermined period interval to determine whether a DDoS attack occurs. The Openflow switch also includes an attack responding module to perceive a feature of the DDoS attack by using the incoming packets introduced into the OpenFlow switch after the determination of the occurrence of the DDoS attack and process the incoming packets in line with the perceived feature of the DDoS attack. Therefore, it is possible to determine and responds to DDos attacks in the OpenFlow switches.

Abstract: Disclosed is an Internet protocol television (IPTV) data collection apparatus including: a transmission path setting unit acquiring a transmission path of an IPTV provider and setting a communication path with respect to a terminal of the transmission path; a message transmitting and receiving unit transmitting a multicast message to at least one terminal belonging to the transmission path and receiving a response message including information related to the IPTV provider and corresponding to the transmitted multicast message; and a data storing unit storing the information related to the IPTV provider, and a method thereof.

Abstract: The present disclosure relates to a system and a method for managing filtering information of attack traffic, and more particularly, to a system and a method for managing filtering information of attack traffic that may block attack traffic in a front end from which the attack traffic is transmitted by transmitting traffic filtering information, to a first autonomous system of the front end from which the attack traffic is transmitted, through a border gateway protocol (BGP) and by applying, to a relevant router, the transmitted traffic filtering information in the corresponding first autonomous system, when an edge router of a second autonomous system (AS) positioned in a rear end sets the traffic filtering information by detecting the attack traffic.

Abstract: Provided are an apparatus and method for controlling packet flow in a multi-stage switch. According to an aspect, there is provided an apparatus for controlling packet flow in a multi-stage switch, including: one or more source line cards configured to receive one or more packets, and to transfer the one or more packets to a switch fabric including a plurality of switch modules forming one or more switching stages such that the one or more packets are transferred along different switching paths in the switch fabric; and a destination line card configured to receive the one or more packets output from the switch fabric, and to transfer Acknowledge (ACK) messages for informing that the packets have been received, to the source line cards, in a predetermined time period.

Abstract: A virtual network operating apparatus and method are provided. The virtual network operating method includes configuring, by a virtual network operating apparatus, a plurality of virtual networks identified by domain names, setting, by the virtual network operating apparatus, representative virtual routers representing each of the virtual networks for each virtual network, setting, by the virtual network operating apparatus, representative routing information including an IP address of each of the representative virtual routers in each virtual router included in the virtual networks, and transmitting, by each virtual router, a packet using the set representative routing information.