Abstract:
Disclosed herein are an apparatus and method for detecting a malicious script. The apparatus includes one or more processors and executable memory for storing at least one program executed by the one or more processors. The at least one program is configured to extract token-type features, each of which corresponds to a lexical unit, and tree-node-type features of an abstract syntax tree from an input script, to train two learning models to respectively learn two pieces of learning data that are generated in consideration of features extracted respectively from the token-type features and the node-type features as having the highest frequency, and to detect whether the script is a malicious script based on the result of ensemble-based malicious script detection performed for the script, which is acquired using an ensemble detection model generated from the two learning models.
Abstract:
Disclosed herein are a distributed system and a method for operating the distributed system. The method for operating a distributed system including a server and multiple clients includes acquiring, by a first client of the multiple clients, a lock on a shared resource using a first table of the server and a second table of the client, and releasing, by the first client, a lock on the shared resource using the first table and the second table, wherein the first table is a lock (DSLock) table for storing information about a distributed shared resource, and the second table is a data structure (DSLock_node) table for a lock request.
Abstract:
Disclosed herein are an apparatus and method for processing fast persistent writing to nonvolatile memory. A method for processing fast persistent writing to a nonvolatile memory includes writing log data from a last storage position in a data block created in a certain size, reflecting the entire data block in a storage medium, increasing the last storage position by a size of the written log data, and reflecting the entire data block in a storage medium, wherein the data block is linearly linked to an additional data block in a creation order, and wherein the data block includes a log data storage region, information about a last storage position where the log data is stored in the log data storage region, and information about a linked next data block.
Abstract:
Disclosed herein are an apparatus for detecting unknown malware using a variable-length operation code (opcode) and a method using the apparatus. The method includes collecting opcode information from a detection target, generating a multi-pixel image having a variable length by performing feature engineering on the opcode information; and detecting unknown malware by inputting the multi-pixel image to a deep-learning model based on AI.
Abstract:
Disclosed herein is a network selecting apparatus including: a determining unit checking an operation state of a cache server in which replicated data corresponding to a data request signal are stored and determining whether the cache server is normally operated, when the data request signal is received from a client; and a selecting unit selecting a first network so that the replicated data are transmitted to input and output devices when the cache server is normally operated and selecting a second network so that original data corresponding to the data request signal are transmitted from a storage server in which the original data are stored to the input and output devices when the cache server is not normally operated.
Abstract:
Disclosed are a method and apparatus for reading data in a distributed file system in which a client and a server are separated. In the method and apparatus, a prefetching operation is performed to provide a continuous read function with high performance even in the distributed file system so that an optimum continuous read function of a local file system within the client may be effectively supported when an application program of the client requests continuous reading on a file (or chunk).
Abstract:
There are provided a system and method for providing a virtual desktop service using a cache server. A system for providing a virtual desktop service according to the invention includes a host server configured to provide a virtual desktop service to a client terminal using a virtual machine, a distributed file system configured to store data for the virtual machine, and a cache server that is provided for each host server group having at least one host server, and performs a read process or a write process of data using physically separate caches when the read process or write process of the data is requested from the virtual machine in the host server.
Abstract:
A distributed network camera system includes a network camera configured to be connected to a network; and a distributed media server configured to process video data provided by the network camera in a network node which is located close to the network camera. Further, the distributed network camera system includes a centralized management server configured to be connected to the network and manage the connection establishment between the distributed media server and the network camera and the operation state of the distributed media server.
Abstract:
Disclosed herein are an apparatus and method for page allocation in a many-to-one virtualization environment. The method may include determining whether a page fault interrupt is caused by page initialization for page allocation, sending an ownership change message to a node having ownership of the corresponding page when the page fault interrupt is determined to be caused by page initialization, and initializing the corresponding page upon receiving an ownership-change-processing-complete message.
Abstract:
An apparatus and method for managing a flow in a server virtualization environment, and a method of applying a QoS policy, the method including a flow processing unit configured to analyze a flow generated by a virtual machine (VM) to extract flow information, determine whether the flow is a new flow by comparing the extracted flow information with preset flow information, and apply a corresponding Quality of Service (QoS) policy to the flow, and a QoS management unit configured to, in a case in which the flow is a new flow, generate a QoS policy for the analyzed flow based on the extracted flow information and prestored virtual machine information, and transmit the generated QoS policy to the flow processing unit.