In the current Internet system, there are many problems using anonymity of the network communication such as personal information leaks and crimes using the Internet system. This is why TCP/IP protocol used in Internet system does not have the user identification information on the communication data, and it is difficult to supervise the user performing the above acts immediately. As a study for solving the above problem, there is the study of Policy Based Network Management (PBNM). This is the scheme for managing a whole Local Area Network (LAN) through communication control for every user. In this PBNM, two types of schemes exist. As one scheme, we have studied theoretically about the Destination Addressing Control System (DACS) Scheme with affinity with existing internet. By applying this DACS Scheme to Internet system management, we will realize the policy-based Internet system management. In this paper, concept of AI-Based automatic unauthorized communication prevention function in DACS-based PBNM Scheme is described.

Machine learning, deep learning and neural networks are extensively developed in many fields, with neural networks playing an important role in a wide variety of applications. However, a sufficient explanation of the structure and functionality of complex and deep neural networks is still needed. In this paper, it is shown that bio-inspired networks are useful for the explanation of network functions. First, the asymmetric network is created based on the biological retinal networks. Second, the classification performance of the asymmetric network is compared to that of the symmetric networks. The directional vectors in the asymmetric networks are generated on the adjacent neurons caused by movement stimulus, which create independent subspaces. Vectors for the movement stimulus are reported experimentally to be generated in the layered cortex in the brain. In this paper, it is shown computationally that many directional movement vectors are generated in the layered asymmetric networks, which create also independent subspaces. Further, when the correlational activities of the adjacent cells are represented in the directed vectors, they create independent subspaces than the direct inputs in the networks. These asymmetric subnetworks will facilitate the transmission of sensory information to higher-level processes such as efficient feature extraction, classification, and learning in the layered networks.

In the current Internet system, there are many problems using anonymity of the network communication such as personal information leaks and crimes using the Internet system. This is why TCP/IP protocol used in Internet system does not have the user identification information on the communication data, and it is difficult to supervise the user performing the above acts immediately. As a study for solving the above problem, there is the study of Policy Based Network Management (PBNM). This is the scheme for managing a whole Local Area Network (LAN) through communication control for every user. In this PBNM, two types of schemes exist. As one scheme, we have studied theoretically about the Destination Addressing Control System (DACS) Scheme with affinity with existing internet. By applying this DACS Scheme to Internet system management, we will realize the policy-based Internet system management. In this paper, as a preliminary step, concept of the PBNM Scheme for multiple domains as cyber physical system that utilizes data science and AI is proposed.

Dimension reduction of data is an important issue in the data processing and iti is needed for the analysis of higher dimensional data in the application domain. Rough set is fundamental and useful to reduce higher dimensional data to lower one. Reduct in the rough set is a minimal subset of features, which has the same discernible power as the entire features in the higher dimensional scheme. The nearest neighbor relation with minimal distance proposed here has a fundamental information for classification. The nearest neighbor relation plays a fundamental role for generation of reducts and threshold functions using the Boolean reasoning on the discernibility and in discernibility matrices, in which the indiscernibility matrix is proposed here to test the sufficient condition for reduct and threshold function. Then, genetation methods for the reducts and threshold functions based on the nearest neighbor relation are proposed here using Boolean operations on the discernibility and the indiscernibility matrices.

In the current Internet system, there are many problems using anonymity of the network communication such as personal information leaks and crimes using the Internet system. This is why TCP/IP protocol used in Internet system does not have the user identification information on the communication data, and it is difficult to supervise the user performing the above acts immediately. As a study for solving the above problem, there is the study of Policy Based Network Management (PBNM). This is the scheme for managing a whole Local Area Network (LAN) through communication control for every user. In this PBNM, two types of schemes exist. The first is the scheme for managing the whole LAN by locating the communication control mechanisms on the course between network servers and clients. The second is the scheme of managing the whole LAN by locating the communication control mechanisms on clients. As the second scheme, we have studied theoretically about the Destination Addressing Control System (DACS) Scheme. By applying this DACS Scheme to Internet system management, we will realize the policy-based Internet system management. As the second step of the second phase for the last goal, we examine the implementation method of the cloud type virtual PBNM which can be used by plural organizations in this paper.

In the current Internet-based systems, there are many problems using anonymity of the network communication such as personal information leak and crimes using the Internet systems. This is because the TCP/IP protocol used in Internet systems does not have the user identification information on the communication data, and it is difficult to supervise the user performing the above acts immediately. As a solution for solving the above problem, there is the approach of Policy-based Network Management (PBNM). This is the scheme for managing a whole Local Area Network (LAN) through communication control of every user. In this PBNM, two types of schemes exist. The first is the scheme for managing the whole LAN by locating the communication control mechanisms on the course between network servers and clients. The second is the scheme of managing the whole LAN by locating the communication control mechanisms on clients. As the second scheme, we have been studied theoretically about the Destination Addressing Control System (DACS) Scheme. By applying this DACS Scheme to Internet system management, we intend to realize the policy-based Internet system management finally. In the DACS Scheme, inspection is not done about compatibility to cloud environment with virtualization technology that spreads explosively. As the result, the coverage of the DACS Scheme is limited only in physical environment now. In this study, we inspect compatibility of the DACS Scheme for the cloud environment with virtualization technology, and enlarge coverage of this scheme. With it, the Virtual DACS Scheme (vDACS Scheme) is established.

As the work for managing a whole network effectively without a limited purpose, there is the work of a PBNM (Policy-based network management). The PBNM has two structural problems such as communication concentration from many clients to a communication control mechanism called PEP (Policy Enhancement Point) and the necessity of the network system updating at the time of introducing the PBNM into LAN. Moreover, user support problems in campus-like computer networks such as trouble user support at updating a client’s setups and coping with annoying communication cannot be improved by the PBNM. To improve these problems, we have been shown a next generation PBNM which overcomes theses problems and has the function which does not exist in the existing PBNM, and called it a DACS (Destination Addressing Control System) Scheme. By the DACS Scheme, communication concentration from many clients to the PEP is solved, and system updating becomes unnecessary. Moreover, user support at updating the client’s setups and coping with annoying communication by the DACS Scheme becomes very effective. In this study, we implement a DACS system to realize a concept of the DACS Scheme.

As the work for managing a whole network effectively without a limited purpose, there is the work of PBNM (policy-based network management). PBNM has two structural problems such as communication concentration from many clients to a communication control mechanism called PEP (policy enhancement point) and the necessity of the network system updating at the time of introducing PBNM into LAN. Moreover, user support problems in campus-like computer networks such as trouble user support at updating a client's setups and coping with annoying communication can not be improved by PBNM. To improve these problems, we show a next generation PBNM which overcomes theses problems and has the function which does not exist in existing PBNM, and called it DACS (destination addressing control system) scheme. By DACS scheme, communication concentration from many clients to PEP is solved, and system updating becomes unnecessary. Moreover, user support at updating the client's setups and coping with annoying communication by DACS scheme becomes very effective.

In standard IP networks, the control of communication of individual connections is an important aspect of network management. Generally, we distinguish two models of communication control. One is based on the exploitation of standard mechanisms, such as IP filtering, port blocking, routing rules, deployed along the path between the client and the server. We refer to these mechanisms as infrastructure-based management model. On the other hand, the control can be carried out by controlling the client machines of every user. This new model is a client-side management model, and it has been realized in our previous work, by means of a dedicated framework we called DACS. Essentially, DACS distributes the control within the client machines. Therefore, also the network management processing workload is distributed. While in our previous work we investigated functions of DACS scheme and network services, here we are more concerned with analyzing the processing workload due to communication control demanded to the client machines in practical networks. In this regard, we evaluate DACS performance from the point of view of the processing load and demonstrate by some preliminary experiments that DACS framework is better than infrastructure-based management models. From this result, we conclude that, DACS outperforms existing solutions for the communication control problem, because it can control a whole local area network by distributed control of client machines, with an acceptable increase of the processing workload.

As a communication mean, personal portal, which is an entrance where each user can acquire his/her interested information on the network, is often used. We have problems to realize the personal portal described as follows. First, the program to realize the personal portal, which is located on a specific Web server, becomes large-scaled and complicated. Moreover, because Web pages as personal portal depend on that program, those pages can't always be useful for each user equally. To solve these problem, we develop two kinds of new Web service which are realized on the network introducing DACS Scheme, which is the network management scheme by communication control of client computers. By use of these Web Services, regardless of information starage form, each user can create the customized personal portal to use information on the network easily and freely for oneself. That is, a free information usage system is realized.

As a communication mean, personal portal which is an entrance where each user can acquire his/her interested information on the network, is often used. We have problems on the existing personal portal described as follows. First, the program to realize the personal portal which is located on a specific Web server, becomes large-scaled and complicated. Because Web pages as personal portal depend on that program, those Web pages can't always be useful for each user equally. Therefore, to solve these problems, we developed two kinds of new Web service which are realized on the network introducing DACS(destination addressing control system) scheme, which is the network management scheme by communication control of client computers. By use of these Web services, each user can create the customized personal portal, which displays the information by a user unit, for using in actual network easily and freely for oneself. In this paper, to deal with information not only by a user unit, but also by a group unit and by all users unit, DACS Web service is proposed. DACS Web service is realized by extending two kinds of functions of Web service respectively and integrating these functions. As the result, each user can create the customized Web page as personal portal, which will be often useful in actual network.

Where customers with different membership and position, use computers as in the university network systems, it often takes much time and efforts for them to cope with the change of the system management. This is because the requirements for the respective computer usage are different in the network and security policies. In this paper, destination addressing control system scheme (DACS scheme) for the university network services is shown. The DACS scheme performs network management efficiently through the communication management of a client. As the characteristic of DACS scheme, only the setup modification is required by a system administrator, when configuration change of the network system is performed. Then, the setup modification is unnecessary by a customer, which shows a merit for both a system administrator and a customer. However, there is a problem to be solved. In existing DACS scheme, it is promised that, DACS client for controlling the communication must be implemented on all clients. When the client not installing DACS client is connected to the network, each network server can be accessed from the client. Therefore, in this paper, secure DACS scheme with function to prevent the communication from the client not installing DACS client, is proposed and examined.

When operation and management in the university network are performed, various problems occur. As one of those problems, user support problems in the network are often shown. As an example, support at the time of changing setups of a client computer by a user, is described. In this case, it take trouble very much for a system administrator because it is often necessary to support individual users, respectively. As another example, it is necessary to take some measure for annoying communication to other users. In this case, much time and effort are spent to specify where the client with annoying communication is under the management by DHCP service. To simplify user supports such as those cases, a new user support by DACS (destination addressing control system) scheme, which is an efficient scheme for the network operation and management in university network, is examined.