|
|
Support for Dynamic Config Reload Inside Rsyslog
Lakatos, Attila ; Češka, Milan (oponent) ; Rogalewicz, Adam (vedoucí práce)
Logs are one of the most valuable assets when it comes to IT system management and mon- itoring. As they record every action that took place on a machine, logs provide the insight system administrators need to spot issues that might impact performance, compliance, and security. For this reason, the rsyslog software utility can be used as it offers the ability to accept inputs from a wide variety of sources, transform them, and output the results to diverse destinations by a set of rules. One shortcoming the software currently has is that it needs to be restarted in order to modify the rule set. The author of this master's thesis points out what types of problems a user might encounter during this period of time, such as messages entering the system are lost, TCP/UDP based connections are disturbed, even if no changes are made. The goal of this thesis is to design and implement an option, which allows users to dynamically reload configuration for core components without the need of a full restart. The improvements aim to address problems raised by the research, as well as increase performance by reusing already existing resources.
|
|
|
IT/OT modular honeypot
Nečas, Martin ; Fujdiak, Radek (oponent) ; Blažek, Petr (vedoucí práce)
The bachelor's thesis created a modular and scalable honeypot system focusing on IT and OT. The goal was to design and implement a system that allows the easy addition of modules representing communication protocols and virtual devices while strongly emphasising modularity. The honeypots are deployed in containers, and the system actively monitors the communication between these containers and the attackers. All communication activities are stored in a centralised log for thorough analysis and monitoring.
|
|
|
Support for Dynamic Config Reload Inside Rsyslog
Lakatos, Attila ; Češka, Milan (oponent) ; Rogalewicz, Adam (vedoucí práce)
Logs are one of the most valuable assets when it comes to IT system management and mon- itoring. As they record every action that took place on a machine, logs provide the insight system administrators need to spot issues that might impact performance, compliance, and security. For this reason, the rsyslog software utility can be used as it offers the ability to accept inputs from a wide variety of sources, transform them, and output the results to diverse destinations by a set of rules. One shortcoming the software currently has is that it needs to be restarted in order to modify the rule set. The author of this master's thesis points out what types of problems a user might encounter during this period of time, such as messages entering the system are lost, TCP/UDP based connections are disturbed, even if no changes are made. The goal of this thesis is to design and implement an option, which allows users to dynamically reload configuration for core components without the need of a full restart. The improvements aim to address problems raised by the research, as well as increase performance by reusing already existing resources.
|
host ::
RSS.