|
|
Nginx Web Server Security Weakness Detection Tool
Wagner, Michal ; Perešíni, Martin (referee) ; Křena, Bohuslav (advisor)
This thesis focuses on the security of the Nginx web server and its configuration options, with an emphasis on the reverse proxy server feature. It explores available alternatives to Nginx and security threats to reverse proxy servers. The thesis also delves into methods of detecting these security threats through penetration testing and conducts research on existing tools for detecting security vulnerabilities in reverse proxies. In the practical part, a tool is developed to demonstrate security attacks and detect vulnerabilities on the Nginx server. The functionality of the tool is validated in a suitable testing environment, and based on the gained experience, a technical specification is formulated for configuring the Nginx reverse proxy server to limit its susceptibility to attacks.
|
|
|
Advanced tool for generating modern Slow DoS attacks
Hrůza, Tomáš ; Člupek, Vlastimil (referee) ; Sikora, Marek (advisor)
In today’s world, cyber threats are becoming increasingly sophisticated. Those threats include SDoS (Slow Denial of Service) and SDDoS (Slow Distributed Denial of Service) attacks, which employ advanced methods to disrupt normal service operations. These attacks are particularly difficult to detect and are effective because they simulate the behavior of legitimate users with slow internet connections. The topic of SDoS attacks is relatively new and not thoroughly documented. To respond to potentially newly devel- oped attacks, it is necessary to understand the principles of currently known attacks and have the practical capability to create them in order to develop effective countermeasures in the future. This thesis focuses on the development of an advanced tool for generating modern SDoS attacks. The main contribution of this work is the enhancement of the generator to create distributed attacks, the creation of an intuitive interface, and more options for monitoring the progress of individual attacks. The theoretical part introduces the topic of internet connection establishment and explains the properties of TCP and IP protocols in detail. It then clarifies the theory of secure communication over the internet using the HTTPS protocol and provides a comparison of currently used web servers. The final theoretical section addresses the topic of denial of service, discussing some types of currently known SDoS attacks, the tools that generate these attacks, and their shortcomings. Next chapter details the implementation of functionalities, which includes performance enhancements of the tool through the use of multiple processes. The developed tool features Slow Read, Slow Next, and Slow Drop attacks, as well as the ability to combine these attacks. This is followed by a description of how a local network of virtual machines was created for the purpose of testing the implemented tool. The final chapter presents the results and effectiveness of the tool in conducting SDDoS attacks against Apache and NGINX web servers in a local network.
|
|
|
Web Based Audio Editor
Kadlčík, Stanislav ; Žižka, Josef (referee) ; Schwarz, Petr (advisor)
The Web Based Audio Editor thesis deals with the requirements specification, selection of technologies and with the implementation itself. The thesis uses modern approaches of HTML5 standards and is divided into the client and the server parts. Both the web application and the server are implemented in JavaScript. The Web based audio editor allows basic editing features like cut, shifting, deleting. All this in multiple audio tracks. The application runs in recent versions of the most widely used web browsers.
|
|
|
Web server for exposing web service on the Banana Pi Pro
Válka, Jaroslav ; Komosný, Dan (referee) ; Troják, David (advisor)
The aim of this thesis is exposed web services on the web server using the Banana Pi Pro platform. Web server installed on a hardware platform Banana Pipra is designed in the form of open source software, in this case, the Web server Apache and Nginx. On the Web server is exposed to the web application using software system Node.js. Is practically part of the project focuses on the comparison of Web sites in terms of speed and maximal number of simultaneous connections in the implementation of the request to the Web service.
|
|
|
Continuous Integration Dashboard
Abramov, Mikhail ; Rychlý, Marek (referee) ; Burget, Radek (advisor)
Tato bakalářská práce se zabývá vývojem webové aplikace pro integraci nástrojů CI/CD. Úkolem bylo prostudovat dostupné technologie a připravit aplikaci odpovídající zadaným požadavkům. Během implementace systému byly nastudovány aspekty vývoje, jako jsou nástroje CI/CD, rámce serveru, uživatelské rámce, databáze, technologie webových serverů, nástroje pro práci s kontejnery. Výsledkem bakalářské práce je aplikace skládající se ze tří částí: serverová část, klientská část a databáze. Tato aplikace je rozdělená do tří částí a připravena ke spuštění v nástrojích kontejnerizace.
|
|
|
Web application for data transfer using TLS protocol
Dzadíková, Slavomíra ; Slavíček, Karel (referee) ; Smékal, David (advisor)
The work deals with web application development, implementation possibilities of web application, secure communication between server part and client part. Protocol HTTPS (Hyper Text Transfer Protocol) and TLS (Transport Layer Protocol) are described in more detail way, also the issue of PKI (Public Key Infrastructure). The work also covers authentication and authorization methods which are used in web applications, and the most common attacks according OWASP TOP 10. Technologies, programming languages and environments, which have been used: Python, Flask, Bootstrap, OpenSSL, Nginx, Nessus, JMeter, Lighthouse.
|
|
|
Smart Video Doorbell Based on Raspberry Pi
Ondrejka, Adam ; Zemčík, Pavel (referee) ; Materna, Zdeněk (advisor)
This thesis is focused on the design and implementation of a smart doorbell based on Raspberry Pi. Unlike commercially available smart doorbells, the solution described in this thesis offers full functionality (motion detection, audiovisual streaming, and notifications) even without internet access. The doorbell operates fully locally and enables the user to use more doorbells at the same time. A web page and desktop app for displaying notifications was also implemented for the doorbell. After connecting to the android app Gotify, notifications can also be delivered to a device with the Android operational system.
|
|
|
Framework for a Web Internet Service Implemented in Google Cloud Platform
Roshka, Andrei ; Smrčka, Aleš (referee) ; Hrubý, Martin (advisor)
Cílem této bakalářské práce je navrhnout a naimplementovat rámcové řešení pro placenou internetovou službu a nasadit ho na cloudové služby poskytované Google Cloud Platform s nejnižší provozní cenou. Výsledná architektura je serverless a používá služby Firebase jako Firestore NoSQL databáze, Firebase Storage a Firebase Authentication. Rešení je psáno v jazyce TypeScript a skládá se ze dvou hlavních cásti - front-end aplikace a pracovního procesu, který zpracovává výpočetní úlohy. React se používá k vytvoření uživatelského rozhraní založeného na komponentách spolu s Reduxem pro centralizovanou správu stavu aplikací. Jako server pro front-end se používá Nginx. Pracovní proces je postaven na Node.js - serverovém prostredí pro JavaScript. Aplikace je úspešně nasazena do servisy Cloud Run jako sada Docker kontejneru za použitím CI/CD pipeliny postavené na Cloud Build.
|
|
|
Tool for Immediate Subtitles in Running Lecture
Pokorný, Filip ; Bartík, Vladimír (referee) ; Kolář, Dušan (advisor)
This thesis deals with solving problems of Alfons consulting center, specifically of their simultaneous transcript service for the hearing-impaired students. Thanks to my regular attendance in the consulting center, I analyzed the problem and designed an app solution that I then programmed. The goal of this app is to receive a text from people realizing the simultaneous transcript and give it to students in the most suitable form which they can use along with the speaker's video projection. The conclusion of the thesis shows the evaluation of my analysis after trying the app in lessons with deaf students.
|
|
|
Information System for a Seller of Bar Feeders for Lathes
Kaleta, Pavel ; Hynek, Jiří (referee) ; Bartík, Vladimír (advisor)
The aim of this bachelor's thesis is to design and implement an information system for monitoring the status of orders, keeping documents related to them and to further facilitate the work of employees of the company engaged in the sale of bar feeders for lathes. The Laravel web application allows users to authenticate, create new orders, edit previously created ones, clear view of all orders and efficient searches, upload documents to orders and view statistics on all orders. In the content of the thesis, the whole development cycle of the system is described. The result of this work is a fully functional and deployed information system.
|
guest ::
