公开(公告)号：US20170083705A1

公开(公告)日：2017-03-23

申请号：US15074497

申请日：2016-03-18

Applicant: Electronics and Telecommunications Research Institute

Inventor： Sang-Rok LEE ,  Jung-Hee LEE ,  Byung-Chul BAE

IPC: G06F21/56

CPC classification number: G06F21/566

Abstract: Disclosed herein are an apparatus and method for analyzing malicious code in a multi-core environment. The apparatus for analyzing malicious code includes a core setting unit for setting at least one monitoring core, on which malicious code is to be monitored, among cores of a multi-core Central Processing Unit (CPU), and executing a monitoring program on the monitoring core, a behavioral information collection unit for, when execution cores that are not set as the monitoring core execute analysis target code, collecting pieces of behavioral information using the monitoring program and a hardware debugging device, and a storage unit for storing the behavioral information.

公开(公告)号：US20170195261A1

公开(公告)日：2017-07-06

申请号：US15298592

申请日：2016-10-20

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Kang-Il CHOI ,  Bhum-Cheol LEE ,  Jung-Hee LEE ,  Hyun-Yong LEE

IPC: H04L12/931 ,  H04L12/26 ,  H04L12/863

CPC classification number: H04L49/70 ,  H04L43/16 ,  H04L45/54 ,  H04L45/586 ,  H04L45/7453 ,  H04L47/2441 ,  H04L47/50 ,  H04L49/901

Abstract: An apparatus for virtual switching includes a queue memory configured to store at least one queue; a data memory configured to store data; a mapper configured to classify the data into flows and store a point of the data in a queue mapped with the flows; a plurality of virtual machines configured to perform a process based on the data; and a virtual switch configured to extract the data from the data memory by referring to the point stored in the queue and transfer the data to the virtual machine, wherein the virtual switch transfers the data corresponding to a single queue to a single virtual machine.

公开(公告)号：US20170041237A1

公开(公告)日：2017-02-09

申请号：US15180815

申请日：2016-06-13

Applicant: Electronics and Telecommunications Research Institute

Inventor： Kang-Il CHOI ,  Bhum-Cheol LEE ,  Jung-Hee LEE ,  Hyun-Yong LEE

IPC: H04L12/851 ,  H04L12/861

CPC classification number: H04L47/2441 ,  H04L49/90

Abstract: An apparatus for parallel processing according to an example may include a queue memory configured to store one or more queues, a data memory configured to store data, a mapper configured to classify the data into flows and store a pointer of the data in a queue mapped with the flow; a plurality of processors configured to perform a process based on the data; and a distributor configured to extract the data from the data memory by referring to the pointer stored in the queue and transmit the data to the processor, wherein the distributor transmits data corresponding to a single queue to a single processor.

Abstract translation: 根据示例的用于并行处理的装置可以包括被配置为存储一个或多个队列的队列存储器，被配置为存储数据的数据存储器，被配置为将数据分类成流的映射器，并将数据的指针存储在队列映射中 流动; 配置成基于所述数据执行处理的多个处理器; 配置为通过参考存储在队列中的指针从数据存储器中提取数据并将数据发送到处理器，其中分发器将对应于单个队列的数据发送到单个处理器。

公开(公告)号：US20160269308A1

公开(公告)日：2016-09-15

申请号：US15047841

申请日：2016-02-19

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Jung-Hee LEE ,  Bhum-Cheol LEE ,  Jong-Geun PARK ,  Seung-Hyun YOON ,  Sang-Min LEE

IPC: H04L12/911 ,  H04L29/08

CPC classification number: H04L41/5012 ,  H04L41/5096

Abstract: A method and an apparatus for integrated management/control of regionally distributed micro-cloud data centers. A system for managing distributed clouds includes an apparatus for managing distributed clouds and an apparatus for managing a plurality of micro-data centers. The apparatus for managing distributed clouds manages the plurality of micro-data centers, analyzes the service inputted by a user to generate optimal virtual resource information, and transmits it to the micro-data center. The micro-data center is allocated with optimal resource according to the inputted service analysis information and resource request information.

Abstract translation: 一种用于区域分布式微云数据中心综合管理/控制的方法和装置。 用于管理分布式云的系统包括用于管理分布式云的装置和用于管理多个微数据中心的装置。 用于管理分布式云的装置管理多个微数据中心，分析由用户输入的服务以生成最佳虚拟资源信息，并将其发送到微数据中心。 微数据中心根据输入的业务分析信息和资源请求信息分配最优资源。

公开(公告)号：US20140201738A1

公开(公告)日：2014-07-17

申请号：US14152708

申请日：2014-01-10

Applicant: Electronics and Telecommunications Research Institute

Inventor： Kang-Il CHOI ,  Bhum-Cheol LEE ,  Jung-Hee LEE ,  Young-Ho PARK ,  Sang-Min LEE ,  Seung-Woo LEE

IPC: G06F9/455

CPC classification number: G06F9/45533 ,  G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L41/00 ,  H04L45/302 ,  H04L45/38 ,  H04L45/42 ,  H04L47/24 ,  H04L49/205 ,  H04L49/70

Abstract: Provided are a method, apparatus, and system for providing a multi-tenant cloud service, which can guarantee quality of service (QOS) in units of flows and virtual machines (VMs). A dynamic virtual flow switch includes a switch flow agent configured to receive and store virtual machine QOS information about each of a plurality of virtual machines operating in a plurality of computer servers and flow QOS information about a flow generated by the virtual machine from a virtual flow controller and a flow processing unit configured to receive the flow generated by the virtual machine and determine a QOS priority of the flow based on the stored virtual machine QOS information of the virtual machine and flow QOS information of the flow.

Abstract translation: 提供了一种用于提供多租户云服务的方法，装置和系统，其可以以流和虚拟机（VM）为单位保证服务质量（QOS）。 动态虚拟流交换机包括交换流程代理，被配置为接收和存储关于在多个计算机服务器中操作的多个虚拟机中的每一个的虚拟机QOS信息，以及关于虚拟机从虚拟流生成的流的QOS信息 控制器和流处理单元，其被配置为接收虚拟机生成的流并基于存储的虚拟机的虚拟机QOS信息和流的流QOS信息来确定流的QOS优先级。

公开(公告)号：US20140123288A1

公开(公告)日：2014-05-01

申请号：US14023635

申请日：2013-09-11

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Sung-Ryoul LEE ,  Young-Han CHOI ,  Jung-Hee LEE ,  Byung-Chul BAE ,  Hyung-Geun OH ,  Ki-Wook SOHN

IPC: H04L29/06

CPC classification number: H04L63/1416

Abstract: A network intrusion detection apparatus and method that perform Perl Compatible Regular Expressions (PCRE)-based pattern matching on the payloads of packets using a network processor equipped with a Deterministic Finite Automata (DFA) engine. The network intrusion detection apparatus includes a network processor core for receiving packets from a network, and transmitting payloads of the received packets to a Deterministic Finite Automata (DFA) engine. A detection rule converter converts a PCRE-based detection rule, preset to detect an attack packet, into a detection rule including a pattern to which only PCRE grammar corresponding to the DFA engine is applied. The DFA engine performs PCRE pattern matching on the payloads of the packets based on the detection rule converted by the detection rule converter.

Abstract translation: 一种网络入侵检测装置和方法，其使用配备有确定性有限自动机（DFA）引擎的网络处理器，对分组的有效载荷执行基于Perl兼容正则表达式（PCRE）的模式匹配。 网络入侵检测装置包括用于从网络接收分组并将接收的分组的有效载荷发送到确定性有限自动机（DFA）引擎的网络处理器核心。 检测规则转换器将基于PCRE的检测规则转换为包含仅对应于DFA引擎的PCRE语法的模式的检测规则，以检测攻击包。 DFA引擎根据检测规则转换器转换的检测规则对报文的有效载荷进行PCRE模式匹配。