|
|
Module for Network Policy Monitoring in Flow Data
Piecek, Adam ; Kučera, Jan (referee) ; Wrona, Jan (advisor)
The aim of this master's thesis is to design a language through which it would be possible to monitor a stream of network flows in order to detect network policy violations in the local network. An analysis of the languages used in the data stream management systems and an analysis of tasks submitted by the potential administrator were both carried out. The analysis specified resulted in the language design which represents pipelining consisting of filtering and aggregation. These operations can be clearly defined and managed within security rules. The result of this thesis also results in the Policer modul being integrated in the NEMEA system, which is able to apply the main commands of the proposed language. Finally, the module meets the requirements of the specified tasks and may be used for further development in the area of monitoring network policies.
|
|
|
Framework for Graphical User Interface Testing
Báča, Erik ; Kučera, Jan (referee) ; Kocnová, Jitka (advisor)
This thesis is describing the development of a framework for graphic user interface testing with usage of Soft Computing algorithms. Development is divided into four phases. The first phase is acquaintance with existing GUI testing frameworks and their analysis. The second phase is about choosing appropriate technologies for development, appropriate algorithms and implementation design. Then there is the framework implementation phase itself and last phase with the testing, result evaluation and improvements proposal.
|
|
|
The DPDK DNS Probe Application Extension
Doležal, Pavel ; Kučera, Jan (referee) ; Vrána, Roman (advisor)
This master's thesis is focused on extension of the DPDK DNS Probe application that monitors DNS traffic in high speed networks. It presents framework DPDK, which can be used for fast packet processing. General architecture of the DNS system is described as well as details of its components. Basic principles of transport protocol TCP are described. It introduces an effective design and implementation of DNS packet parsing to optimize DPDK DNS Probe's performance. It also introduces a design and implementation of processing DNS messages sent over TCP for export of traffic statistics. The application's performance was tested using a high speed traffic generator Spirent.
|
|
|
Liquidation of Trading Companies and Legal Status of Liquidator
Kučera, Jan ; Nožička, Lukáš (referee) ; Musilová, Helena (advisor)
Work deals with the abolition of all types of companies and concentrates on liquidation. Work aims to analyze the possibility of termination of corporate insolvency, to pay attention to the possible potential pitfalls. Analytical section examines the progress of liquidation of a company from the perspective of a liquidator. The goal is a seamless implementation of the liquidation of the greatest benefits for shareholders.
|
|
|
Remote Configuration of P4 Device
Neruda, Jakub ; Kučera, Jan (referee) ; Wrona, Jan (advisor)
Administration of a large network from a central node with a vendor independent API is quite important issue these days. The concept of SDN was truly helpful with realization of the solution, namely in the form of the OpenFlow protocol. Nowadays, a P4 language is gaining momentum, primarily thanks to its ability to describe whole packet processing pipeline and also for the P4 Runtime, solution to the distributed network configuration. CESNET association is one of the research groups starting to support P4 in their network cards beloging to the Combo series. In this work, an API was designed for these cards, aimed at the dynamic flow table configuration. This API was used for implementation of a basic support of the Combo cards in the P4 Runtime.
|
|
|
Eye Tracking Based Gaming Combat System
Kučera, Ján ; Kapinus, Michal (referee) ; Chlubna, Tomáš (advisor)
Aim of this thesis is to create a 3D fighting game in which, a player is able to aim via their eye gaze. Eyes are tracked using special glasses Pupil Core, that track players eye gaze using infrared camera. The game itself is implemented in a game engine Unity and communication between game and glasses is implemented via local server. The result is a 3D fighting game with an aiming mechanic using eye gaze.
|
|
|
System for the Protection against DoS Attacks Using IDS
Mjasojedov, Igor ; Fukač, Tomáš (referee) ; Kučera, Jan (advisor)
This bachelor's thesis deals with the use of the Intrusion Detection System in the protection of computer networks against Denial of Service attacks. Suricata is the IDS system chosen for this purpose. The main goal of the thesis is to integrate the Suricata system with the DDoS Protector device. DDoS Protector - DCPro is a security network device, which uses, from a software perspective, DPDK technology for high-speed network traffic processing. Due to this fact, this technology was also integrated into the Suricata system. After this integration, the communication between DDoS Protector and Suricata system was allowed more easily. As a result, two DPDK compatible regimes were created in the Suricata system. The individual regime allows Suricata to process network data directly from the network interface card. The second, integrated regime allows DCPro to send network data to the Suricata system for highly precise analysis, which significantly extends DDoS Protector's attack detection abilities.
|
|
|
Accelerated Detection of Network Security Threats
Piecek, Adam ; Kekely, Lukáš (referee) ; Kučera, Jan (advisor)
This bachelor's thesis deals with the acceleration of IDS (Intrusion Detection System) for detection of security threats in networks. The main goal of the thesis is a proposal to use the Software Defined Monitoring (SDM) concept to accelerate the activity of IDS applications with a regard to their subsequent deployment for high-speed network analysis. The proposed system is implemented and subsequently evaluated for two selected open-source applications - Snort and Suricata. Over and above the task, native support for the SZE2 interface for packet acquisition is also implemented for the Suricata system in order to achieve even faster acceleration using an accelerated network interface card. Two alternatives of the concept are further analysed and compared in the thesis. The first alternative uses the hardware-accelerated version of SDM, while the second alternative is based on full software implementation of the SDM principle. Both alternatives are then evaluated in terms of achieved results and performance parameters of the entire system before and after the acceleration.
|
|
|
Acceleration of Open vSwitch in DPDK
Vodák, David ; Kučera, Jan (referee) ; Martínek, Tomáš (advisor)
Virtual switch is a software that connects virtual machines to the internet, which makes it a crucial part of virtualization on servers. Nevertheless, it can be rather ineffective when it comes to high speed traffic, since it switches all frames in the software. This thesis is about hardware acceleration of the virtual switch called Open vSwitch. The acceleration prototype, which is the goal of this thesis, is based on the RTE flow interface, the SR-IOV standard, and Intel PAC N3000 card. In the scope of this master's thesis, all necessary technologies were described and the acceleration prototype was designed, implemented, and tested. Results of executed measurements indicate increased throughput when rules of the acceleration prototype were offloaded to hardware.
|
|
|
Libyang - Python 3 Module
Sedlák, David ; Kocnová, Jitka (referee) ; Kučera, Jan (advisor)
This bachelor thesis deals with interaction between C and Python 3 languages. The main goal was to provide user friendly Python 3 binding for libyang2 library which provides interface for C language. Final Python 3 interface is created with help of CFFI package, is simply usable in Python 3 and adequately uses rich features of Python 3 language. Comparison of few approaches and tools to interact with C library from Python code is also covered in the thesis, including measurements of call overhead caused by them. Implemented Python 3 interface will help with integration of YANG modeling language in network applications and devices.
|
guest ::
RSS feed.