Çѱ¹Á¤º¸Åë½ÅÇÐȸ ³í¹®Áö (Journal of the Korea Institute of Information and Communication Engineering)
Current Result Document :
ÇѱÛÁ¦¸ñ(Korean Title) |
IDC¿ë ¼ÒÇü ÅëÇÕº¸¾È¶ó¿ìÅÍÀÇ ½Ç½Ã°£ Æ®·¡ÇȽ¦ÀÌÇΰú IPSÀÇ À¶ÇÕ ±¸Çö |
¿µ¹®Á¦¸ñ(English Title) |
A Convergence Implementation of Realtime Traffic Shaping and IPS on Small Integrated Security Router for IDC |
ÀúÀÚ(Author) |
¾ç½ÂÀÇ
¹Ú±â¿µ
Á¤È¸°æ
SeungEui Yang
Kiyoung Park
HoeKyung Jung
|
¿ø¹®¼ö·Ïó(Citation) |
VOL 23 NO. 07 PP. 0861 ~ 0868 (2019. 07) |
Çѱ۳»¿ë (Korean Abstract) |
ÃÖ±Ù µé¾î ºòµ¥ÀÌÅÍ¿Í »ç¹°ÀÎÅÍ³Ý ±×¸®°í ÀΰøÁö´É µî ´Ù¾çÇÑ ¼¹ö ±â¹ÝÀÇ ¼ºñ½º°¡ ¿Â¶óÀλ󿡼 ÀÌ·ç¾îÁö°í ÀÖ´Ù. ÀÌ¿¡ µû¶ó ¾ÈÁ¤ÀûÀÎ ¼¹ö ¿î¿µÀ» Áö¿øÇÏ´Â IDC(Internet Data Center)ÀÇ ¼ö¿äµµ Ä¿Áö°í ÀÖ´Ù. IDC´Â ¾ÈÁ¤ÀûÀΠȸ¼±°ú Àü·Â°ø±Þ½Ã¼³À» °®Ãá ¼¹ö ÀÔÁֽü³·Î½á È¿À²ÀûÀ¸·Î ±¸ºÐµÇ¾îÁø ·¢ ´ÜÀ§ ¼ºê³×Æ®¿öÅ© »ó¿¡ ¼¹ö¸¦ 20~30´ë¾¿ ¹¾î °ü¸®ÇÏ´Â ½Ã¼³ÀÌ´Ù. ¿©±â¼´Â ·¢ ´ÜÀ§·Î ¼¹öµéÀÇ º¸¾È, ¹æȺ®, Æ®·¡ÇÈ µîÀ» È¿À²ÀûÀ¸·Î °ü¸®ÇØÁÖ´Â ¹æ¹ýÀÌ ÇÊ¿äÇÏ´Ù. Áï ¶ó¿ìÅÍ, ¹æȺ®, IPS ±×¸®°í ȸ¼±¼Óµµ¸¦ Á¦¾îÇØ ÁÖ´Â Æ®·¡ÇȽ¦ÀÌÇÎ ±â´É°ú ÃÖ±Ù °ü½É ºÐ¾ßÀÎ VPN ±â¼ú±îÁö Áö¿øÇØ¾ß ÇÑ´Ù. À̸¦ Áö¿øÇϱâ À§ÇØ 3~5Á¾ÀÇ »ó¿ë Àåºñ¸¦ äÅÃÇÒ °æ¿ì µµÀÔºñ¿ëÀº ¹°·Ð ¿î¿ë°ü¸®¿¡ Å« ºÎ´ãÀÏ ¼ö ÀÖ´Ù. µû¶ó¼ º» ³í¹®¿¡¼´Â 5°¡Áö ±â´ÉÀ» ÇϳªÀÇ ·¢ ´ÜÀ§ ¼ÒÇü ÅëÇÕº¸¾È¶ó¿ìÅÍ¿¡ ±¸ÇöÇÏ´Â ¹æ¹ýÀ» Á¦½ÃÇÏ°í, ƯÈ÷ IDC¿¡¼´Â Çʼö ±â¼úÀÎ Æ®·¡ÇÈ ½¦ÀÌÇΰú IPS¸¦ À¶ÇÕ ±¸ÇöÇϸç ÀÌ¿¡ µû¸¥ È¿¿ë¼ºµµ Á¦½ÃÇÏ°íÀÚ ÇÑ´Ù.
|
¿µ¹®³»¿ë (English Abstract) |
Various server-based services such as big data, IoT and artificial intelligence have been made online. As a result, the demand for IDC to support stable server operation is increasing. IDC is a server-based facility with a stable line and power supply facility that manages 20 to 30 servers in an efficiently separated rack-level subnetwork. Here, we need a way to efficiently manage servers security, firewall, and traffic on a rack-by-rack basis. Including traffic shaping capabilities that control routers, firewalls, IPS, and line speeds, as well as VPN technology, a recent interest. If three or five kinds of commercial equipment are adopted to support this, it may be a great burden to the management cost as well as the introduction cost. Therefore, in this paper, we propose a method to implement the five functions in one rack-unit small integrated security router. In particular, IDC intends to integrate traffic shaping and IPS, which are essential technologies, and to propose the utility accordingly.
|
Å°¿öµå(Keyword) |
¶ó¿ìÅÍ
¹æȺ®
Æ®·¡ÇȽ¦ÀÌÇÎ
IDS
OpenWRT
router
firewall
traffic shaping
IDS
OpenWRT
|
ÆÄÀÏ÷ºÎ |
PDF ´Ù¿î·Îµå
|