|
|
Detection of DoS and DDoS attacks in IPv6
Frátrik, Tibor ; Fujdiak, Radek (referee) ; Holasová, Eva (advisor)
This bachelor thesis in the theoretical part contains a description of the network and transport layer. The protocols of individual layers are also discussed. It is primarily about their function and safety. Individual attacks are also related to these layers. In this thesis are mentioned DoS (denial-of-service) and DDoS (distributed denial-of-service) attacks. Furthermore, the bachelor thesis mentioned detection and mitigation tools, and the possible solutions. The practical part contains descriptions of detections that were created in the Snort and Suricata programs. Finally, the individual detections and mitigations were also tested. In the detection of DoS attacks, the Suriata and Snort programs focused primarily on the number of packets per unit time. Detection in the Scapy program was focused mainly on individual ports of the transport layer. The goal was for DoS attacks to be detected and for ordinary network traffic not to be detected.
|
|
|
High Availability firewalls
Frátrik, Tibor ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
This diploma thesis is dedicated to researching the possibility redundancy of firewalls, especially commercial, software or hardware firewalls. The theoretical part describes individual firewalls and their redundancy options. The diploma thesis was more focused on two specific firewalls: ASA and Pfsense. As part of the practical part, topologies were designed and implemented for testing the redundancy of these firewalls. Dynamic address translations (NAT), VPN connection status, either site-to-site or remote-access VPN connections, and TCP connections were selected for testing. Finally, the results for individual firewalls were compared. Where it was mainly researched and compared, how the computer network reacts to redundancy in individual types of firewalls.
|
|
|
Detection of DoS and DDoS attacks in IPv6
Frátrik, Tibor ; Fujdiak, Radek (referee) ; Holasová, Eva (advisor)
This bachelor thesis in the theoretical part contains a description of the network and transport layer. The protocols of individual layers are also discussed. It is primarily about their function and safety. Individual attacks are also related to these layers. In this thesis are mentioned DoS (denial-of-service) and DDoS (distributed denial-of-service) attacks. Furthermore, the bachelor thesis mentioned detection and mitigation tools, and the possible solutions. The practical part contains descriptions of detections that were created in the Snort and Suricata programs. Finally, the individual detections and mitigations were also tested. In the detection of DoS attacks, the Suriata and Snort programs focused primarily on the number of packets per unit time. Detection in the Scapy program was focused mainly on individual ports of the transport layer. The goal was for DoS attacks to be detected and for ordinary network traffic not to be detected.
|
guest ::
RSS feed.