계약망 프로토콜을 적용한 네트워크 보안 모델의 설계와 시뮬레이션

• 영문명: Application of Contract Net Protocol to the Design and Simulation of Network Security Model
• 발행기관: 한국시뮬레이션학회
• 저자명: 서경진(Suh, Kyong Jin) 조대호(CHO, TAE HO)
• 간행물 정보: 『한국시뮬레이션학회 논문지』제12권 제4호, 25~40쪽, 전체 16쪽
• 주제분류: 공학 > 기타공학
• 파일형태: PDF
• 발행일자: 2004.01.10

영문 초록

With the growing usage of the networks, the world-wide Internet has become the main means to exchange data and carry out transactions. It has also become the main means to attack hosts. To solve the security problems which occur in the network such as Internet, we import software products of network security elements like an IDS (Intrusion Detection System) and a firewall. In this paper, we have designed and constructed the general simulation environment of network security model composed of multiple IDSes and a firewall which coordinate by CNP (Contract Net Protocol) for the effective detection of the intrusion. The CNP, the methodology for efficient integration of computer systems on heterogeneous environment such as distributed systems, is essentially a collection of agents, which cooperate to resolve a problem. Command console in the CNP is a manager who controls the execution of agents or a contractee, who performs intrusion detection. In the network security model, each model of simulation environment is hierarchically designed by DEVS (Discrete EVent system Specification) formalism. The purpose of this simulation is that the application of rete pattern-matching algorithm speeds up the inference cycle phases of the intrusion detection expert system and we evaluate the characteristics and performance of CNP architecture with rete pattern-matching algorithm.

목차

1. 서론

2. 보안 시뮬레이션 환경의 설계

3. 계약망 프로토콜의 설계

4. 계약망 프로토콜을 통한 연동

5. Rete 패턴 매칭 알고리즘의 적용

6. 시뮬레이션

7. 결론

참고문헌

키워드

IDS firewall general simulation environment network security model CNP DEVS formalism rete pattern-matching algorithm