Jung-sik Sung

A multi-gigabit rate deep packet inspection algorithm using TCAM

With the increasing importance of network protection from cyber threats, it is requested to develop a multi-gigabit rate pattern-matching method for protecting against malicious attacks in high-speed network. This paper devises a high-speed deep packet inspection algorithm with TCAM by using an m-byte jumping window pattern-matching scheme. The proposed algorithm significantly reduces the number of TCAM lookups per payload by m times with the marginally enlarged TCAM size which can be implemented by cascading multiple TCAMs. Due to the reduced number of TCAM lookups, we can easily achieve multi-gigabit rate for scanning the packet payload. It is shown by simulation that for the Snort rule with 2,247 patterns, our proposed algorithm supports more than 10 Gbps rate with a 9 Mbit TCAM.

VoD streaming synchronization mechanism with multiple users for service continuity

In this paper, we propose multiple users-based streaming service synchronization mechanism for streaming delivery and synchronization in wire-wireless service environment and analyze the available network performance. Current structure of streaming service for multiple users is not designed to be suitable for the purpose of service continuity. So, multiple users cannot be provided with seamless media experience in wire-wireless service environment. Extending the concept from one user to multiple users, we identify the possibility of service continuity. We introduce the concept of streaming service synchronization, and implement VoD streaming service using proposed synchronized mechanism, and then analyze the available network performance. Finally we discuss the feasibility and practicality in aspect of service deployment.

A fast pattern-matching algorithm for network intrusion detection system

We present a multi-gigabit rate multiple pattern-matching algorithm with TCAM that enables protecting against malicious attacks in a high-speed network. The proposed algorithm significantly reduces the number of TCAM lookups per payload with m-byte jumping window scheme. Due to the reduced number of TCAM lookups, we can easily achieve multi-gigabit rate for scanning the packet payload in order to inspect the content. Furthermore, multi-packet inspection is achieved easily by the extended state transition diagram with the shifting distance. With experimental results, we have clearly justified the proposed algorithm works well for a multi-gigabit network intrusion detection system.

FTTH-based IPTV testbed in Korea

The IPTV service is a worldwide trend, however it has been delayed in Korea. ETRI has been building own FTTH service center connected with commercial FTTH networks. We describe the architecture and related technologies.

Design and implementation of u-service manager in open service framework

User centric service in mobile environment has become a new issue in the area of service convergence with the advent of versatile mobile devices. We propose an open service framework with support for service mobility that executes contents and applications in a dynamic environment. We put emphasis on u-service manager of the open service framework in this paper. For the u-service manager, mechanisms for device profiling, user preference learning, and profile-based service recommendation are designed to enable device-capability-aware service recommendation functionality. A prototype system integrates functionalities with proprietary protocol to support multiple device platforms. The prototype shows the capability of the u-service manager that controls service sessions in real-time under service mobility. Also it shows that the u-service manager provides the dynamic configuration environment appropriate to the user and the targeted terminal device.

A Design and Implementation of u-Service Framework

Service mobility has become a new issue in the area of service convergence with the advent of versatile mobile devices. Hence, we propose an open service framework with support for service mobility that executes contents and applications in a dynamic environment. For the framework, the concept and role of a device and its application for a service are redefined into the new concepts of device, execution engine, and service. Mechanisms for device profiling, user preference learning, and profile-based service recommendation are designed to enable device-capability-aware service recommendation functionality. A prototype system integrates functionalities with proprietary protocol and a content transcoder to support multiple device platforms. The prototype shows the capability of the framework in service mobility support and its advancement into an open international application platform.

Camera monitoring service for mobile devices in ubiquitous computing environment

Camera monitoring service is useful for security, caring service for the old and the week, disaster prevention, and so on. In this paper, we discuss the service scenario to support various devices and its issues in ubiquitous computing environment. Also, we propose a framework for camera monitoring service for supporting mobile devices in ubiquitous computing environment.

Performance evaluation of uniform distribution R-SIMA algorithm for efficient resource allocation in wireless network

WiMedia Ultra Wide Band (UWB) provides parameterized quality of service (QoS) using traffic specification (TSPEC) when packets from upper layer need to be transmit with guaranteed services. As the medium resource is limited, the optimal medium time required for each device needs to be estimated to share the resource efficiently among the devices. We propose uniform distribution R-SIMA algorithm to make a reservation of medium resources efficiently based on parameterized QoS. In other words, the algorithm proposed calculates the number of medium access slots (MASs) based on a TSPEC, local resources and local conditions, and determines the suitable locations of the MASs within the WiMedia superframe in order to accommodate more devices. With simulation results, we have clearly justified the proposed algorithm can accommodate more devices than the existing scheme.

Performance Evaluation of TCAM Based Pattern-Matching Algorithm

With the increasing importance of network protection from cyber threats, it is required to develop a multi-gigabit rate pattern-matching method for protecting against malicious attacks in high-speed networks. This paper devises a high-speed deep packet inspection algorithm with TCAM by using an m-byte jumping window pattern-matching scheme. The proposed algorithm significantly reduces the number of TCAM lookups per payload by m times with the marginally enlarged TCAM size which can be implemented by cascading multiple TCAMs. Due to the reduced number of TCAM lookups, we can easily achieve a multi-gigabit rate for scanning the packet payload. Furthermore, multi-packet inspection is achieved easily by the extended state transition diagram with the shifting distance. With simulation results, we have clearly justified the proposed algorithm works well for a multi-gigabit network intrusion detection system.