|
|
Malware Detection in TLS Communication
Kapišinský, Marián ; Ryšavý, Ondřej (referee) ; Matoušek, Petr (advisor)
Táto diplomová práca demonštruje, že šifrovanú škodlivú komunikáciu je možné stále detekovať v sieťovej prevádzke aj napriek tomu, že rozdiely medzi šifrovanou komunikáciou neustále sa vyvíjajúceho škodlivého and bežného softvéru sa pomaly zmenšujú. Detekcia sa spolieha výlučne na údaje extrahované z nešifrovaných častí protokolu TLS. Údaje sa potom analyzujú pomocou náhodných lesov a izolačných lesov. Práca ukazuje, že oba modely fungujú dobre len s malým počtom nepresných klasifikácií. Tieto dva modely tiež vykazujú podobné výsledky pri nasadení v reálnom svete.
|
|
|
A Tool for VoIP Audio Extraction
Ružička, Jakub ; Ryšavý, Ondřej (referee) ; Matoušek, Petr (advisor)
In this thesis, we describe VoIP protocols and design of a system to reconstruct audio data from VoIP communication. The system is able to detect VoIP packet streams in an IP network traffic and assemble an audio signal they carry. RTP and IAX VoIP protocols are supported. Unlike widespread RTP protocol, IAX is not fully supported by available tools although it is used by increasingly popular Asterisk communications project and offers interesting features not found in RTP. The system is implemented as a library with minimal frontend.
|
|
|
Analysis and Detection of Multimedia Types in RTP Traffic
Kmeť, Martin ; Ryšavý, Ondřej (referee) ; Matoušek, Petr (advisor)
This thesis deals with the issues of detecting the codec used for the encoding of voice data carried by the RTP protocol without having access to the information carried by signalisation protocols in VoIP applications. Its main goal is to create and implement a fast algorithm for detecting the codec used for voice transfer via the RTP protocol. This algorithm should be fast enough to be used for offline analysis of captured data as well as for real-time online analysis. For research of possibilities were compared two approaches of detection. Detection by the characteristics of the codecs was chosen to solve the problem itself. Within the solution was performed data analysis and implementation of the application followed by testing on data.
|
|
|
Automata Learning for Fast Detection of Anomalies in Network Traffic
Hošták, Viliam Samuel ; Matoušek, Petr (referee) ; Holík, Lukáš (advisor)
The focus of this thesis is the fast network anomaly detection based on automata learning. It describes and compares several chosen automata learning algorithms including their adaptation for the learning of network characteristics. In this work, various network anomaly detection methods based on learned automata are proposed which can detect sequential as well as statistical anomalies in target communication. For this purpose, they utilize automata's mechanisms, their transformations, and statistical analysis. Proposed detection methods were implemented and evaluated using network traffic of the protocol IEC 60870-5-104 which is commonly used in industrial control systems.
|
|
|
Detection of Mobile Apps in Network Traffic Using JA3 Fingerprinting
Vavro, Ján ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
In recent years, mobile network communication became more secure. The reason is encapsulation with TLS protocol, that encrypts transmitted data. User security was increased, but on the other hand it limits network monitoring possibilities, because the data are encrypted. This thesis researches possibilities of monitoring mobile applications in network traffic using JA3 and JA3S fingerprints. The aim is to implement tools for automated creation of fingerprints database and consecutive detection.
|
|
| |
|
|
Security Monitoring of Home IoT Networks
Krajč, Patrik ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
The main purpose of my bachelor thesis is create system for security monitoring of home IoT networks and user interface for network anomalies detection. Final application shows information about traffic in specified time intervals for specific day and hour. Traffic information are obtained from IPFIX records stored in MySQL database. Used test kits of IPFIX records were created from communication of locally connected devices that used CoAP protocol.
|
|
|
Modelling and Simulation of Network Design Guides for IP Routing
Rybová, Veronika ; Ryšavý, Ondřej (referee) ; Matoušek, Petr (advisor)
This bachelor's thesis describes simulation of network using tools Packet Tracer and OMNeT++. Models of network are created according to design guides by Cisco company, which use routing protocols RIP, OSPF and redistribution. In order to provide full functionality of models in OMNeT++ it is necessary to implement protocol RIP and redistribution from protocol OSPF to protocol RIP. Practical usage of tools is demonstrated by simulations of accessibility and stability of network. Thesis investigates results of simulations and usage of both tools for simulation of networks. We use design guides, which are destined to design of real networks, and implement protocol according to standard RFC, therefore we suppose that this thesis will have practical usage for analysis and simulation of company's and academical networks.
|
|
|
Conditions of Waste-made Fuel Combustion including legislative Requirement
Matoušek, Petr ; Pavlas, Martin (referee) ; Novotný, Pavel (advisor)
This bachelor’s thesis describes possibilities of usage of waste-made fuel from point of view of energetic utilisation in industry and power supply. There is a brief overview of energy resources structure, current situation in energy production and in waste management in Czech Republic. Particular types of waste-made fuels are also specified. One of the main parts of this work is fundamental analysis of legislation which governs waste management and alternative fuel usage. In the last part of the thesis the possibility of usage of mechanical-biological treatment as a waste management system is assessed.
|
|
|
Management Tools for DNS Registraries
Vrtílek, Michal ; Ščuglík, František (referee) ; Matoušek, Petr (advisor)
This master's thesis deals with domain registration and related registration systems administrators domains. The main focus is on domain registration via registrars, which is connected with an interface for the registrars registration systems. A part of the interface for the registrars is EPP communication protocol, which is in the project described in detail. Furthermore, there is an overview of freely available registration systems. After this overview, the work focuses more on the czech registration system FRED, specifically the section solving communication with the registrars. A part of is a little research conducted among the registrars aimed at their solving access to the registration system. To facilitate this approach, this work focuses on the implementation of the client library that shield programmers from the details of the communication protocol between the registrar and the registration system and provides an interface for easy implementation of client for the FRED system.
|
guest ::
RSS feed.