公开(公告)号：US08677488B2

公开(公告)日：2014-03-18

申请号：US13323050

申请日：2011-12-12

申请人： Kyoung-Soon Kang ,  Hak-Suh Kim ,  Boo-Geum Jung ,  Ki-Cheol Jeon ,  Byung-Jun Ahn

发明人： Kyoung-Soon Kang ,  Hak-Suh Kim ,  Boo-Geum Jung ,  Ki-Cheol Jeon ,  Byung-Jun Ahn

IPC分类号： H04L29/06

CPC分类号： H04L63/1458 ,  H04L41/142 ,  H04L43/026 ,  H04L43/0894 ,  H04L63/1425

摘要： Provided is a DDoS attack detection apparatus including an information collecting unit to collect DDoS detection information including rate information about traffic change, variation of a first type flow and a Packet Per Second (PPS) for a second type flow, in which the rate information about traffic change is obtained using packet count of packets input per a unit time, flow count of flows input per the unit time and the byte count of bytes input per the unit time; and a testing unit to calculate a probability of occurrence of the DDoS attack by use of a first probability determined by the rate information about traffic change, a second probability determined by the variation of the first type flow and a third probability determined by the PPS for the second type flow and detect occurrence of the DDoS attack based on the probability of occurrence of the DDoS attack.

摘要翻译： 提供了一种DDoS攻击检测装置，其包括：信息收集单元，用于收集关于流量变化的速率信息，第一类型流的变化和第二类型流的每秒包（Packet Per Second，PPS）的DDoS检测信息，其中关于 使用每单位时间输入的分组的分组计数，每单位时间输入的流量流量和每单位时间输入的字节数字获得流量变化; 以及测试单元，通过使用由关于业务变化的速率信息确定的第一概率来计算DDoS攻击的发生概率，由第一类型流的变化确定的第二概率和由PPS确定的第三概率，用于 根据DDoS攻击的发生概率，第二类流检测DDoS攻击的发生。

公开(公告)号：US20120151583A1

公开(公告)日：2012-06-14

申请号：US13314741

申请日：2011-12-08

申请人： Kyoung-Soon KANG ,  Hak-Suh Kim ,  Byung-Jun Ahn

发明人： Kyoung-Soon KANG ,  Hak-Suh Kim ,  Byung-Jun Ahn

IPC分类号： G06F21/00

CPC分类号： G06F21/552 ,  H04L63/0227 ,  H04L63/1416 ,  H04L63/1458 ,  H04L63/166

摘要： A Distributed Denial of Service (DDoS) attack detection and defense apparatus and method are provided. The Distributed Denial of Service (DDoS) attack detection and defense apparatus includes: a flow information collection unit to collect, from one or more input packets with an IP address of an attack target system as a destination IP address, flow information including source IP addresses of the input packets and packet counts of one or more flows that are classified for each of the source IP addresses and each of different protocol types; an inspection unit to calculate packets per second (PPS) values of the flows based on the packet counts; and a response unit to determine a DDoS attack response method for each of the flows based on the PPS value and the protocol type of a corresponding flow and to process the corresponding flow using the determined DDoS attack response method

摘要翻译： 提供了分布式拒绝服务（DDoS）攻击检测和防御设备和方法。 分散拒绝服务（DDoS）攻击检测和防御装置包括：流信息收集单元，从一个或多个输入分组以攻击目标系统的IP地址作为目的地IP地址收集包括源IP地址的流信息 对于源IP地址和不同协议类型中的每一个分类的一个或多个流的输入分组和分组计数; 基于分组计数来计算流的每秒包（PPS）值的检查单元; 以及响应单元，用于基于PPS值和相应流的协议类型来确定每个流的DDoS攻击响应方法，并使用确定的DDoS攻击响应方法来处理相应的流

公开(公告)号：US08634717B2

公开(公告)日：2014-01-21

申请号：US13314741

申请日：2011-12-08

申请人： Kyoung-Soon Kang ,  Hak-Suh Kim ,  Byung-Jun Ahn

发明人： Kyoung-Soon Kang ,  Hak-Suh Kim ,  Byung-Jun Ahn

IPC分类号： H04B10/00

CPC分类号： G06F21/552 ,  H04L63/0227 ,  H04L63/1416 ,  H04L63/1458 ,  H04L63/166

摘要： A Distributed Denial of Service (DDoS) attack detection and defense apparatus and method are provided. The Distributed Denial of Service (DDoS) attack detection and defense apparatus includes: a flow information collection unit to collect, from one or more input packets with an IP address of an attack target system as a destination IP address, flow information including source IP addresses of the input packets and packet counts of one or more flows that are classified for each of the source IP addresses and each of different protocol types; an inspection unit to calculate packets per second (PPS) values of the flows based on the packet counts; and a response unit to determine a DDoS attack response method for each of the flows based on the PPS value and the protocol type of a corresponding flow and to process the corresponding flow using the determined DDoS attack response method.

摘要翻译： 提供了分布式拒绝服务（DDoS）攻击检测和防御设备和方法。 分散拒绝服务（DDoS）攻击检测和防御装置包括：流信息收集单元，从一个或多个输入分组以攻击目标系统的IP地址作为目的地IP地址收集包括源IP地址的流信息 对于源IP地址和不同协议类型中的每一个分类的一个或多个流的输入分组和分组计数; 基于分组计数来计算流的每秒包（PPS）值的检查单元; 以及响应单元，用于基于PPS值和相应流的协议类型来确定每个流的DDoS攻击响应方法，并使用确定的DDoS攻击响应方法来处理相应的流。

公开(公告)号：US07522527B2

公开(公告)日：2009-04-21

申请号：US10663476

申请日：2003-09-15

申请人： Jong-Arm Jun ,  Sung-Hyuk Byun ,  Byung-Jun Ahn ,  Seung-Yeob Nam ,  Dan-Keun Sung

发明人： Jong-Arm Jun ,  Sung-Hyuk Byun ,  Byung-Jun Ahn ,  Seung-Yeob Nam ,  Dan-Keun Sung

IPC分类号： G01R31/08 ,  H04L12/28 ,  H04L12/56

CPC分类号： H04L49/3045 ,  H04L47/6225 ,  H04L49/3027 ,  H04L49/45

摘要： Disclosed is a configuration method and device for a two-dimensional expandable crossbar matrix switch for application to tera-level high-speed and large-capacity switches. The present invention includes N input ports, N output ports, and an N×N matrix switch for transmitting cells between the input and output ports. Each input port includes N VOQs which are sequentially combined by n VOQs to configure respective L VOQ groups. The L VOQ groups are connected to L XSUs through independent interface ports. Therefore, each input port can transmit a maximum of L cells to the matrix switch during one cell time slot.

摘要翻译： 公开了一种用于二维可扩展交叉矩阵开关的配置方法和装置，用于应用于级联高速和大容量交换机。 本发明包括N个输入端口，N个输出端口和用于在输入端口和输出端口之间传送单元的N×N矩阵开关。 每个输入端口包括由n个VOQ顺序组合以配置各个L VOQ组的N个VOQ。 L VOQ组通过独立接口端口连接到L XSU。 因此，每个输入端口可以在一个单元时隙期间向矩阵开关发送最多的L个单元。

公开(公告)号：US20080082210A1

公开(公告)日：2008-04-03

申请号：US11904459

申请日：2007-09-27

申请人： Bup-Joong Kim ,  Woo-Young Choi ,  Byung-Jun Ahn

发明人： Bup-Joong Kim ,  Woo-Young Choi ,  Byung-Jun Ahn

IPC分类号： G05B19/04 ,  G06F19/00

CPC分类号： E02B15/04 ,  B63B35/32

摘要： Provided are a management ship and working robots in waters based on a wireless network and a method for controlling working robots thereof. The robot-ship group includes: a signal strength measuring unit for measuring strengths of pre-defined signals; and a working robot control unit for determining which of the first mother ship and the second mother ship the working robot is to communicate with according to a comparison result of the signal strength, and controlling the working robots to perform the work according to a set-up route, wherein the first mother ship includes: a working robot preparing unit for performing a preparation work required before and after the working robots perform the work; and a mother ship control unit for transmitting the pre-defined signal to the working robot and communicating data with the working robot.

摘要翻译： 基于无线网络的管理船舶和工作机器人以及用于控制其工作机器人的方法。 机器人船组包括：用于测量预定义信号强度的信号强度测量单元; 以及工作机器人控制单元，用于根据信号强度的比较结果来确定第一母船和第二母船是工作机器人要进行通信的工作机器人控制单元，并且控制工作机器人根据设定值进行工作， 其中，所述第一母船包括：作业机器人准备单元，用于执行所述工作机器人执行所述工作之前和之后所需的准备工作; 以及母船控制单元，用于将预定义信号发送到工作机器人并与工作机器人通信数据。

公开(公告)号：US07970493B2

公开(公告)日：2011-06-28

申请号：US11904459

申请日：2007-09-27

申请人： Bup-Joong Kim ,  Woo-Young Choi ,  Byung-Jun Ahn

发明人： Bup-Joong Kim ,  Woo-Young Choi ,  Byung-Jun Ahn

IPC分类号： G06F19/00 ,  G05B19/18 ,  G05B15/02

CPC分类号： E02B15/04 ,  B63B35/32

摘要： Provided are a management ship and working robots in waters based on a wireless network and a method for controlling working robots thereof. The robot-ship group includes: a signal strength measuring unit for measuring strengths of pre-defined signals; and a working robot control unit for determining which of the first mother ship and the second mother ship the working robot is to communicate with according to a comparison result of the signal strength, and controlling the working robots to perform the work according to a set-up route, wherein the first mother ship includes: a working robot preparing unit for performing a preparation work required before and after the working robots perform the work; and a mother ship control unit for transmitting the pre-defined signal to the working robot and communicating data with the working robot.

摘要翻译： 基于无线网络的管理船舶和工作机器人以及用于控制其工作机器人的方法。 机器人船组包括：用于测量预定义信号强度的信号强度测量单元; 以及工作机器人控制单元，用于根据信号强度的比较结果来确定第一母船和第二母船是工作机器人要进行通信的工作机器人控制单元，并且控制工作机器人根据设定值进行工作， 其中，所述第一母船包括：作业机器人准备单元，用于执行所述工作机器人执行所述工作之前和之后所需的准备工作; 以及母船控制单元，用于将预定义的信号发送到工作机器人并与工作机器人通信数据。