Abstract: The present disclosure is related to a device and method for publishing a certificate. The method includes receiving an RPC message including an publishing method from a client; when the client includes request authority, generating a wrapper for each certificate of a bundle and storing the generated wrapper in a database; when the certificate is not a final certificate, initializing a location and counter of a next certificate to be fetched; transmitting a certificate fetching request from the location; when the certificate is a newly fetched certificate, updating the location of the certificate, incrementing a count variable, generating a certificate wrapper for the certificate, and adding the generated certificate wrapper to the database; and when the certificate is reliable, transmitting an RPC response message to the client.

Abstract: Disclosed herein a method and system for optimizing content removal from content store in NDN. The method includes: search the content store when receiving a request interest packet from a consumer; generating an optimization table when receiving the request interest packet; receiving first data corresponding to the request interest packet from a producer; storing the first data in the content store; setting an entry hit rate and a threshold; and deleting the stored first data based on the set entry hit rate and the set threshold.

Abstract: Disclosed herein is a method for content caching in an individual node constituting a named data networking system, and an individual node determines whether or not to store data in its CS based on a node count and a cache level and based on a determination result, delivers the data to a next node after storing or without storing the data in a CS.

Abstract: Disclosed herein is a system and method for validating data integrity and provenance in named data networking (NDN). For more efficient security in NDN, per-segment provenance and data integrity are verified by minimizing the number of signing operations regardless of the size of data using the attributes of a Merkle tree. Generation and validation of a manifest with per-segment provenance and integrity of a file is possible regardless of the size of the file, thereby reducing burden of computing.

Abstract: A software-defined network (SDN) system and method for implementing the same can construct a network having flexible network topology by abstracting switches and controllers, as well as a host connected to said switches, and controllers, thereby increasing scalability of a hierarchical SDN network. The SDN system includes a host part, an SDN switch part, and an SDN controller part.

Abstract: A system and method for virtualizing SDN-based network monitoring. The system for includes: an information collector, a monitoring component, an information converter, and a resource allocator, in which a user-defined virtual monitor is included so that integrated monitoring may be performed, and expandability may be guaranteed to dynamically respond to a user's, demands.

Abstract: A software-defined network (SDN) controller and its method for authenticating switches through encryption of the switches' identifiers. The authenticating method may include obtaining a data path identifier (DPID)-based authentication code, authenticating a received and encrypted session key by using the DPID-based authentication code, determining the presence of another switch having an identical DPID as that of the authenticated switch, and adding a modifier to the DPID and storing the modified DPID if indeed there is another switch with an identical DPID present.

Abstract: A software-defined network (SDN) system and method for implementing the same can construct a network having flexible network topology by abstracting switches and controllers, as well as a host connected to said switches, and controllers, thereby increasing scalability of a hierarchical SDN network. The SDN system includes a host part, an SDN switch part, and an SDN controller part.

Abstract: A system for controlling a carrier virtual network is disclosed. The system includes at least one virtual network controller for controlling resources of a carrier virtual network based on customer request information received from a customer network controller, and at least one physical network controller for controlling resources of a carrier physical network based on a service profile received from the at least one virtual network controller. The at least one virtual network controller interworks with the at least one physical network controller in a one to one, one to N (N is an integer equal to or larger than 2), or N to one correspondence.

Abstract: A system and method for virtualizing SDN-based network monitoring. The system for includes: an information collector, a monitoring component, an information converter, and a resource allocator, in which a user-defined virtual monitor is included so that integrated monitoring may be performed, and expandability may be guaranteed to dynamically respond to a user's, demands.

Abstract: A server connection apparatus and method for controlling a connection between a plurality of controller servers and a plurality of network devices. The server connection apparatus includes a network connector configured to connect a plurality of controller servers capable of functioning as OpenFlow protocol-based SDN controllers and a plurality of network devices on a data plane and relay transmission and reception of data between the controller servers and the network devices; and a controller configured to create a list of available controller servers by monitoring an operational state of each controller server, select a particular controller server to be in charge of controlling a network device in response to a received request, and then control connection relationships between the plurality of controller servers and the plurality of network devices based on the selection result.

Abstract: A method and apparatus for managing a flow table is provided. The method includes dividing a flow table into a plurality of states according to occupancy levels of the flow table in a network device; and managing the flow table by reflecting the changed state of the flow table.

Abstract: A communication method in a software defined network (SDN) using a hierarchical structure and a system thereof are provided. The communication method includes separating a transport plane and a control plane from each other; hierarchically partitioning the control plane into a plurality of lower-level controllers and a upper-level controller that is configured to integratedly manage the plurality of lower-level controllers; and controlling communication among unit networks or through at least one unit network by using a hierarchical structure of the control plane.