|
|
Denial of Service detection methods
Horský, Milan ; Zeman, Václav (referee) ; Sikora, Marek (advisor)
This bachelor thesis deals with a methodology for detecting and describing the Denial of Service (DoS) condition on a web server. The aim of the thesis is to develop and implement methods that enable effective detection of DoS attacks in an experimental network. The theoretical part focuses on the analysis of different types of DoS attacks, including their detection on the application server and network side, and discusses possible reasons for false positives. In the practical part, software tools for monitoring and analyzing server and network resources were developed and then tested against different types of DoS attacks. As a result of the work, the proposed methodology has been validated and implemented in an experimental network, which provides useful tools for improving the security and stability of web servers.
|
|
|
Virtualization of the ambulatory information system server
Zapletal, Jan ; Jan,, VOŽEH (referee) ; Ondrák, Viktor (advisor)
This bachelor's thesis deals with server virtualization for the needs of a private healthcare facility’s ambulatory information system. It analyzes the current state within the organization in terms of the functioning and usage of the specified IS. It provides an overview of available virtualization technologies. The main part of the thesis focuses on proposing improvements to the way of functioning of the information system within the facility.
|
|
|
Modular Application for the Management of Cyber Polygons
Janek, Samuel ; Rychlý, Marek (referee) ; Hranický, Radek (advisor)
The goal of this work is the design and development of version 2.0 of the Brno University of Technology Cyber Arena (BUTCA) platform. The BUTCA platform is used for cybersecurity training. The reason for the creation of this work are new requirements that require extensive changes in the core of the platform itself. For this reason, a part of this work is dedicated to the reimplementation and subsequent expansion of the existing system. In order to meet some of the new requirements, the platform is extended with an authentication server (AS), which is implemented as a separate application. Both the AS and the platform use a client-server architecture, with the server part being implemented as a web API and the client part as a Single-Page Application (SPA). The implementation of this work will expand the use of the platform among institutions, which, in the case of version 1.0, would have problem with processing of their sensitive data by external institution.
|
|
|
Comprehensive Integration of Apache Guacamole into the BUTCA Platform
Morawiec, Daniel ; Ilgner, Petr (referee) ; Lieskovan, Tomáš (advisor)
This master thesis focuses on problematics of the comprehensive integration of Apache Guacamole into the Brno University of Technology Cyber Arena (BUTCA). The theoretical part of the thesis is devoted to virtualization technologies, namely virtualization, containerization and cloud computing. The cloud virtualization platform OpenStack, the project Apache Guacamole and the cyber range platform BUTCA – Kybernetická aréna are subsequently described. In the practical part of the thesis, analysis of current status, preparing of environments and experimental deployment and integration of the project Apache Guacamole are executed within BUTCA platform.
|
|
|
Testing the response of operating systems to different IPv6 flows
Ruiner, Michal ; Polák, Ladislav (referee) ; Jeřábek, Jan (advisor)
The aim of the thesis is to create an array of virtual machines and research their response to the IPv6 protocol. Another significant part is to utilize the provided tool for generating and sniffing IPv6 traffic and verify its correct functionality. For such purpose, the GNS3 open-source software is selected. A~reader is familiarized with the concepts of virtualization, GNS3 functionality and various methods of software testing together with the implemented practical models. The IPv6 protocol is introduced in detail as well as the packet format, address types and several IPv6 protocols useful for the thesis. The practical part is discussed in the Numerical results chapter. The topology is established and connectivity verified using IPv4. Configuration of static IPv6 addresses is performed on the devices as well as configuration of router to distribute particular prefixes. 5 testing scenarios are proposed that increase the input load to the tool in sense of higher number of addresses for the 3 different modes - passive, active and aggressive. 3 scripts were developed. Performance testing script measures utilization of computational resources. The other 2 scripts perform packet capturing and further analysis to compare the results of proposed scripts with provided tool. The comparison is done utilizing passive and aggressive modes. Active mode is used to observe the response of various operating systems to different IPv6 flows. Specifically, multiple Windows 10 builds, Linux distributions, Windows XP, 7, 11, macOS and Android.
|
|
|
Hardware acceleration of packet classification using TC Flower
Benc, Marek ; Fujcik, Lukáš (referee) ; Libich, Jiří (advisor)
Sdružení CESNET vyvíjí vysokorychlostní programovatelné síťové karty COMBO (aktuálně až s dvěma 100Gbps porty) zaměřené na analýzu a zpracování síťových dat. Karty obsahují FPGA čip, který dovoluje uživatelům přesně definovat způsob, jakým má být síťový provoz zpracován. Jedno z možných využití těchto karet je jako síťový přepínač pro virtuální stroje v data centru. Tato práce je zaměřená na implementaci podpory TC Flower offloadu pro karty COMBO (software a FPGA firmware). Jedná se o všeobecné rozhraní pro instalaci flow pravidel typu shoda+akce do SmartNICů, a dovoluje nám použít je pro správu síťového provozu mezi virtuálními stroji a vnějším světem. Cílem je úspora procesorových cyklů hostitelského stroje.
|
|
|
Design of Part of ICT Infrastructure Migration to the Data Center
Kočíbová, Iveta ; Čada, Lukáš (referee) ; Ondrák, Viktor (advisor)
This Master Thesis deals with the design of part of ICT infrastructure migration of two sites of the international company to the external data center. It analyzes the current status of company ICT, describes the virtualization infrastructure and its operational costs. Main part of the Thesis describes a possible solution of migration of virtualization infrastructure to external data center by using project management tools and methods. Finally, the Thesis summarizes project benefits for the company.
|
|
|
Automated system for installing and configuring GNU/Linux virtual hosts
Horák, Daniel ; Polívka, Michal (referee) ; Pelka, Tomáš (advisor)
This work deals with possibilities of administration of virtual machines (mainly from the developer's point of view) and available methods for automatic installation of GNU/Linux distributions. First part contains the information about virtualisation technologies and possibilities to configure them with a libvirt library. The definition and specification of each part of virtualisation environment (virtual machines, disks, networks) using XML is described. Further more the possibilities of automatic installation of Linux distributions based on RedHat and Debian considering the virtualisation environment are discussed. The possibility of copying an existing disk with installed system is also mentioned. In a practical part a server application for control and management of virtual machines including automatic installation of operating system is proposed and realised.
|
|
|
The Concept of Virtualization Extension for BVV Trade Fairs Brno
Svída, Dominik ; Dudek, Tomáš (referee) ; Ondrák, Viktor (advisor)
In my bachelor´s thesis I deal with an issue of extension of virtual platform in a great company. In the first part of my thesis I work with familiarization with the company and analysis of the actual IT structure. The second part is theoretically focused on area of virtualization, reasons for usage and types of virtualization. Furthermore, I describe the most used platforms from Microsoft and VMware companies, in addition I compare them. The last part of my thesis is about a proposal of the most suitable solution and a total evaluation of benefits for the company.
|
|
| |
guest ::
