Abstract: An apparatus for managing a security policy of a firewall according to an embodiment includes a rule request module that receives one or more requested rules to be applied to a firewall, a rule merge module that merges a pre-applied rule of the firewall and the one or more requested rules when the number of rules applied to the firewall exceeds a maximum number of rule registrations of the firewall due to the requested rule, and a firewall interface module that receives the pre-applied rule from the firewall and provides the pre-applied rule to the rule merge module, and re-registers a merged rule merged through the rule merge module in the firewall, and the rule merge module is configured to merge the pre-applied rule and the one or more requested rules so that a security vulnerable space occurring due to the merging is minimized.

Abstract: An apparatus for managing a security policy of a firewall according to an embodiment includes a rule request module that receives one or more requested rules to be applied to a firewall, a rule merge module that merges a pre-applied rule of the firewall and the one or more requested rules when the number of rules applied to the firewall exceeds a maximum number of rule registrations of the firewall due to the requested rule, and a firewall interface module that receives the pre-applied rule from the firewall and provides the pre-applied rule to the rule merge module, and re-registers a merged rule merged through the rule merge module in the firewall, and the rule merge module is configured to merge the pre-applied rule and the one or more requested rules so that a security vulnerable space occurring due to the merging is minimized.

Abstract: An apparatus for accessing a wireless network includes an access manager configured to request access to a wireless network according to a wireless network access condition including at least one desired service set identifier (SSID); and a wireless network access module configured to search for at least one wireless network corresponding to the at least one desired SSID, and access the searched at least one wireless network.

Abstract: Disclosed are an apparatus and method for controlling transmission power of a terminal in a wireless environment. The apparatus for controlling transmission power of a terminal includes an optimal transmission power calculation unit configured to calculate an optimal transmission power value for a terminal of a type, the terminal being accessible to one or more wireless networks; a transmission power setting unit configured to, when an access of the terminal to at least one of the one or more wireless networks is sensed, provide the terminal with optimal transmission power values corresponding to the terminal and the network accessed by the terminal.

Abstract: Provided are a system and method for controlling virtual private network (VPN) access. The system includes a first VPN gateway, a second VPN gateway, a wireless local area network (WLAN) access control server configured to detect a corporate intranet connection of a wireless communication terminal connecting to a corporate intranet via the first VPN gateway, and a VPN setting change server configured to receive a request to change a VPN setting of the wireless communication terminal from the WLAN access control server and control the wireless communication terminal to change the VPN gateway currently in connection with the wireless communication terminal to the second VPN gateway in accordance with the VPN setting change request.

Abstract: A communication method implemented in a mobile device is provided. The communication method includes limiting a frequency band on which the mobile device performs a scanning operation to a first frequency band used for a wireless connection of the mobile device; determining whether it is necessary to scan a second frequency band during a subsequent scanning operation of the mobile device; and in response to determining that it is necessary to scan the second frequency band, allowing the subsequent scanning operation to be performed on a plurality of frequency bands including the first and second frequency bands.

Abstract: Provided are an apparatus for setting a roaming parameter and a method for the apparatus to set a roaming parameter. The apparatus includes a receiver configured to receive terminal information from a terminal connected to a wireless local area network (LAN), a manager configured to store and manage roaming parameters according to terminal models connectable to the wireless LAN (terminal-model-specific roaming parameters), a calculator configured to calculate a roaming parameter of the terminal using the received terminal information and the terminal-model-specific roaming parameters, and a transmitter configured to transmit the calculated roaming parameter to the terminal.

Abstract: Provided are an apparatus for setting a roaming parameter and a method for the apparatus to set a roaming parameter. The apparatus includes a receiver configured to receive terminal information from a terminal connected to a wireless local area network (LAN), a manager configured to store and manage roaming parameters according to terminal models connectable to the wireless LAN(terminal-model-specific roaming parameters), a calculator configured to calculate a roaming parameter of the terminal using the received terminal information and the terminal-model-specific roaming parameters, and a transmitter configured to transmit the calculated roaming parameter to the terminal.

Abstract: Provided are a system and method for setting an adaptive set of handoff parameters. The system includes a user terminal configured to transmit an authentication request to a network and receive a set of handoff parameters from the network; an access point (AP) belonging to the network and configured to receive the authentication request from the user terminal, transmit the authentication request to a central management server, receive the set of handoff parameters from the central management server, and transmit the set of handoff parameters to the user terminal; and the central management server, which is configured to store and manage a plurality of network-specific sets of handoff parameters for one or more networks, authenticate the user terminal using the authentication request received from the AP, and transmit a set of handoff parameters of a network to which the authenticated user terminal connects to the AP.

Abstract: Provided are a system and method for controlling virtual private network (VPN) access. The system includes a first VPN gateway, a second VPN gateway, a wireless local area network (WLAN) access control server configured to detect a corporate intranet connection of a wireless communication terminal connecting to a corporate intranet via the first VPN gateway, and a VPN setting change server configured to receive a request to change a VPN setting of the wireless communication terminal from the WLAN access control server and control the wireless communication terminal to change the VPN gateway currently in connection with the wireless communication terminal to the second VPN gateway in accordance with the VPN setting change request.

Abstract: Disclosed are an apparatus and method for controlling transmission power of a terminal in a wireless environment. The apparatus for controlling transmission power of a terminal includes an optimal transmission power calculation unit configured to calculate an optimal transmission power value for a terminal of a type, the terminal being accessible to one or more wireless networks; a transmission power setting unit configured to, when an access of the terminal to at least one of the one or more wireless networks is sensed, provide the terminal with optimal transmission power values corresponding to the terminal and the network accessed by the terminal.

Abstract: An apparatus for accessing a wireless network includes an access manager configured to request access to a wireless network according to a wireless network access condition including at least one desired service set identifier (SSID); and a wireless network access module configured to search for at least one wireless network corresponding to the at least one desired SSID, and access the searched at least one wireless network.

Abstract: Provided is a communication method implemented by a mobile device in a wireless network in which a plurality of frequency bands is available, wherein a first wireless device and a second wireless device in the wireless network are configured to use a first one and a second one of the plurality of frequency bands, respectively, to provide wireless connections. The method includes: while the mobile device is connected to the second wireless device, receiving a frame which includes information indicating that the first wireless device is configured to use the first frequency band to provide a wireless connection, the frame being transmitted from the first wireless device in the second frequency band and received through a scanning operation performed by the mobile device only on the second frequency band; and allowing a subsequent scanning operation of the mobile device to be performed only on the first frequency band.

Abstract: A communication method implemented in a mobile device is provided. The communication method includes limiting a frequency band on which the mobile device performs a scanning operation to a first frequency band used for a wireless connection of the mobile device; determining whether it is necessary to scan a second frequency band during a subsequent scanning operation of the mobile device; and in response to determining that it is necessary to scan the second frequency band, allowing the subsequent scanning operation to be performed on a plurality of frequency bands including the first and second frequency bands.

Abstract: Provided is a communication method implemented by a mobile device in a wireless network in which a plurality of frequency bands is available, wherein a first wireless device and a second wireless device in the wireless network are configured to use a first one and a second one of the plurality of frequency bands, respectively, to provide wireless connections. The method includes: while the mobile device is connected to the second wireless device, receiving a frame which includes information indicating that the first wireless device is configured to use the first frequency band to provide a wireless connection, the frame being transmitted from the first wireless device in the second frequency band and received through a scanning operation performed by the mobile device only on the second frequency band; and allowing a subsequent scanning operation of the mobile device to be performed only on the first frequency band.

Abstract: Provided are a wireless terminal and a method of managing a network connection using the same. The wireless terminal includes a login processor configured to carry out a login procedure including an authentication procedure and a user account verification procedure, a received signal strength indication (RSSI) detector configured to detect an RSSI and check a receiving state, a wireless connection profile manager configured to generate, maintain, or delete a wireless connection profile, and a controller configured to monitor a login process state and a network connection state from the login processor and the RSSI detector and control the login processor or the wireless connection profile manager according to the monitoring result.

Abstract: Provided are a system and method for setting an adaptive set of handoff parameters. The system includes a user terminal configured to transmit an authentication request to a network and receive a set of handoff parameters from the network; an access point (AP) belonging to the network and configured to receive the authentication request from the user terminal, transmit the authentication request to a central management server, receive the set of handoff parameters from the central management server, and transmit the set of handoff parameters to the user terminal; and the central management server, which is configured to store and manage a plurality of network-specific sets of handoff parameters for one or more networks, authenticate the user terminal using the authentication request received from the AP, and transmit a set of handoff parameters of a network to which the authenticated user terminal connects to the AP.