Abstract: Provided is a method in which a management server provides wireless LAN security policy by participating in multiple APs. The method includes a step of receiving terminal information of a terminal, which is acquired in a process of scanning broadcasting information of multiple APs, from each of the multiple APs, a step of issuing and storing a token for opening a wireless LAN data channel to each of the multiple APs on the basis of reception time points of the terminal information, a step of receiving a token request for opening a wireless LAN data channel to an AP to be accessed, selected by a terminal among the multiple APs, and a step of distributing, to the terminal, a token of the AP to be accessed corresponding to the token request.

Abstract: Provided is a matching system including a policy and rule processing unit configured to extract SC units for each application service required, combine the SC units, configure a transaction unit, and determine an amount to be charged for a transaction according to a charging rule; a matching processing unit configured to match the extracted SC units to NC units; and an NC combination processing unit configured to combine the NC units used for the matching and deliver the combination of the NC units and detailed operating conditions to the networking management system.

Abstract: Provided is a matching system including a policy and rule processing unit configured to extract SC units for each application service required, combine the SC units, configure a transaction unit, and determine an amount to be charged for a transaction according to a charging rule; a matching processing unit configured to match the extracted SC units to NC units; and an NC combination processing unit configured to combine the NC units used for the matching and deliver the combination of the NC units and detailed operating conditions to the networking management system.

Abstract: A method of controlling congestion of network equipment that connects networks with each other, includes determining a type of congestion based on a location of the network equipment; and identifying a network connection section having a strong possibility of occurrence of congestion based on the type of congestion, and setting a critical congestion bandwidth that is used to determine the occurrence of congestion. Further, the method includes identifying users required for equal distribution of traffic upon occurrence of congestion based on the critical congestion bandwidth; and equally distributing traffic to the identified users based on the critical congestion bandwidth, and then dropping an excess of arriving traffic over the equally distributed traffic, thereby performing avoidance of the congestion.

Abstract: A touch device is provided that allows users to easily select text in an Electronic Book (e-book), based on a touch interaction. A method is also provided that operates an e-book function in the touch device which includes displaying e-book content, receiving an anchor interaction at a location in text of the e-book content, displaying a number of candidate anchors, based on the location where the anchor interaction is input, determining two selected candidate anchors as definite anchors, and forming a block of text in the definite anchors.

Abstract: A method for setting up a computing environment, which includes: storing data for setting up computing environments necessary for the update of a plurality of client terminals that are connected through a network; receiving information about computing environments that are configured on the client terminals from the client terminals; upon receiving a request for the update from the client terminals, classifying the client terminals that share the same system image; and transferring the latest version of the data for setting up the computing environments which are higher than the client terminals of the client terminals; and updating the classified client terminals with the latest version of the data.

Abstract: An apparatus for allocating a network bandwidth includes an information collection unit configured to collect flow information of a network; and a traffic check unit configured to check traffic of the collected flow information. Further, the apparatus includes a traffic respond unit configured to suppress the network bandwidth depending on a check result of the traffic; and a control unit configured to the information collection unit, the traffic check unit, and the traffic respond unit.

Abstract: A system for adjusting an energy measurement interval in a communication node on a network includes a measurement module configured to calculate a traffic load applied to the communication node in conformity with a traffic load measurement interval and calculate an energy consumption consumed in the communication node in conformity with an energy measurement interval. The system further comprising an information management module and a measurement interval setting module.

Abstract: A method of controlling congestion of network equipment that connects networks with each other, includes determining a type of congestion based on a location of the network equipment; and identifying a network connection section having a strong possibility of occurrence of congestion based on the type of congestion, and setting a critical congestion bandwidth that is used to determine the occurrence of congestion. Further, the method includes identifying users required for equal distribution of traffic upon occurrence of congestion based on the critical congestion bandwidth; and equally distributing traffic to the identified users based on the critical congestion bandwidth, and then dropping an excess of arriving traffic over the equally distributed traffic, thereby performing avoidance of the congestion.

Abstract: Provided is a DDoS attack detection apparatus including an information collecting unit to collect DDoS detection information including rate information about traffic change, variation of a first type flow and a Packet Per Second (PPS) for a second type flow, in which the rate information about traffic change is obtained using packet count of packets input per a unit time, flow count of flows input per the unit time and the byte count of bytes input per the unit time; and a testing unit to calculate a probability of occurrence of the DDoS attack by use of a first probability determined by the rate information about traffic change, a second probability determined by the variation of the first type flow and a third probability determined by the PPS for the second type flow and detect occurrence of the DDoS attack based on the probability of occurrence of the DDoS attack.

Abstract: A method and an apparatus for fairly allocating resources to network users are provided. The method for fair resource allocation to network users allows the resource allocation apparatus to collect flow information between a user terminal and a service server and aggregates the flow information based on at least one of a user terminal address, a service server address, a user terminal, a service server address, and a service. The allocation resource of the user is controlled to the predetermined recommended bandwidth by using the ratio of the aggregated flow information.

Abstract: The present disclosure relates to a system and a method for managing filtering information of attack traffic, and more particularly, to a system and a method for managing filtering information of attack traffic that may block attack traffic in a front end from which the attack traffic is transmitted by transmitting traffic filtering information, to a first autonomous system of the front end from which the attack traffic is transmitted, through a border gateway protocol (BGP) and by applying, to a relevant router, the transmitted traffic filtering information in the corresponding first autonomous system, when an edge router of a second autonomous system (AS) positioned in a rear end sets the traffic filtering information by detecting the attack traffic.

Abstract: Disclosed is a network bandwidth distribution device which includes an information collector which collects information associated with a connection environment; a controller which judges a state of a connection environment according to the collected information and collects information of each user to judge whether an occupied bandwidth of each user is exceeded; and a bandwidth allotter which limits an occupied bandwidth of each user based on the judged state of a connection environment and whether an occupied bandwidth of each user is exceeded.

Abstract: Provided is a DDoS attack detection apparatus including an information collecting unit to collect DDoS detection information including rate information about traffic change, variation of a first type flow and a Packet Per Second (PPS) for a second type flow, in which the rate information about traffic change is obtained using packet count of packets input per a unit time, flow count of flows input per the unit time and the byte count of bytes input per the unit time; and a testing unit to calculate a probability of occurrence of the DDoS attack by use of a first probability determined by the rate information about traffic change, a second probability determined by the variation of the first type flow and a third probability determined by the PPS for the second type flow and detect occurrence of the DDoS attack based on the probability of occurrence of the DDoS attack.

Abstract: A touch device is provided that allows users to easily select text in an Electronic Book (e-book), based on a touch interaction. A method is also provided that operates an e-book function in the touch device which includes displaying e-book content, receiving an anchor interaction at a location in text of the e-book content, displaying a number of candidate anchors, based on the location where the anchor interaction is input, determining two selected candidate anchors as definite anchors, and forming a block of text in the definite anchors.

Abstract: A method of binding a network-based service flow is provided. The method binds a network-based service flow through notification of a terminal by allowing the terminal to notify a mobile access gateway (MAG) of binding information of a desired service flow at a specific moment by allowing intervention of the terminal, and allowing the MAG to again notify a local mobility anchor (LMA) of corresponding service flow binding information.

Abstract: A smart border router includes a traffic analyzer for receiving a traffic control policy including a network's routing policy and QoS policy from a router provided on a border of a network, and analyzing the same; a flow translator for, when receiving a plurality of flows from a specific network, translating a received flow to satisfy the traffic control policy of a destination network to which the flow will be transmitted; and a flow information controller for transmitting the translated flow to the destination network through a flow control protocol.

Abstract: A method and an apparatus for fairly allocating resources to network users are provided. The method for fair resource allocation to network users allows the resource allocation apparatus to collect flow information between a user terminal and a service server and aggregates the flow information based on at least one of a user terminal address, a service server address, a user terminal, a service server address, and a service. The allocation resource of the user is controlled to the predetermined recommended bandwidth by using the ratio of the aggregated flow information.

Abstract: Disclosed are a method and system for distributed denial of service (DDoS) attack detection and traffic mitigation using flow statistics. The method for DDoS attack detection and traffic mitigation using flow statistics includes: collecting first statistics for each flow based on flow information generated by traffic flow of a network connection device; and grouping the first statistics for each flow on a per-flow basis and processing the same into second statistics containing at least one of the number of bytes, the number of packets, and the number of flows per unit time.

Abstract: The present invention relates to a method for displaying accompanying vehicle position information and an apparatus thereof. The method for displaying the position information according to the present invention receives position information, displays the received position information with a unique identifier of a preset partner terminal, when the position information includes the unique identifier, and displays the received position information with an own identifier, when the position information does not include the unique identifier. According to the present invention, it is possible to display the accompanying vehicle position information with the own position information, without using a separate group management server.