상세정보
학술지
Packet Aggregation and Abnormal Traffic Fitering Methodology for Network System Performance
- 발행일
- 201204
- 출처
- International Journal of Information Processing and Management, v.3 no.2, pp.78-84
- ISSN
- 2093-4009
- 출판사
- 차세대융합기술연구원(AICIT)
- 협약과제
- 11PI1200, 클린인터넷과 공정접속 환경 제공을 위한 실시간 트래픽 통합제어플랫폼 기술 개발, 이준경
- 초록
- A normal traffic includes a plurality of packets in the same session, while most attack traffic consists of single packets generated in a single session. This papar relates to a method for aggregating single packets in a single session capable of detecting packets as attack traffic if the amount of single packets is excessively increased in a single session, and aggregating the single packets into a single flow to thus prevent degradation of a network's performance due to the attack traffic. If single packets in a single session are inputted, checking a single packet processing reference and selecting one among a packet processing threshold value (Las) for each autonomous system (AS), a packet processing threshold value (Lh) for each host, and an overall system packet processing threshold value (Ls); and if the amount of the single packets in a single session is larger than the selected packet processing threshold value, aggregating the single packets in the single session into a single flow. This paper provides a method and apparatus for aggregating single packets in a single session capable of detecting packets as attack traffic if the amount of single packets is excessively increased in a single session, and aggregating the single packets into a single flow to thus prevent degradation of a network's performance due to the attack traffic. Additionally we propose a methodology of abnormal traffic filtering based on the threshold values.
- KSP 제안 키워드
- Abnormal traffic, Autonomous system, Network system performance, Overall system, Threshold Value, filtering based, packet aggregation, packet processing, traffic filtering