|
Cryptographic coprocessors for IoT microcontrollers communication protection
Český, Michal ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
This bachelor thesis outlines the issue of how communication can be secured within the IoT. The microcontroller itself can also be used for this purpose, however, security will never be assured as it will be when using a hardware cryptographic co-processor. To generate the keys and certificate, the ATECC608B coprocessor is chosen which holds the necessary "secrets" used to secure the communication. As a demonstration of the cryptographic coprocessor functionality, the ESP32 microcontroller is connected to the AWS server where all the connections to the server are established using the cryptographic coprocessor.
|
|
Log analysis of active network elements
Kajánková, Petra ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
The master thesis focuses on the issue of searching for malicious activity originating from authorized users who have permission to modify devices. The theoretical part first introduces the basic network model ISO/OSI, together with TCP/IP. It then focuses on the two most well-known logging protocols, the Syslog protocol and SNMP. The practical part of the work consists of the theoretical design and subsequent implementation of the program that is able to evaluate records of events occuring on individual network devices.
|
|
High Availability firewalls
Frátrik, Tibor ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
This diploma thesis is dedicated to researching the possibility redundancy of firewalls, especially commercial, software or hardware firewalls. The theoretical part describes individual firewalls and their redundancy options. The diploma thesis was more focused on two specific firewalls: ASA and Pfsense. As part of the practical part, topologies were designed and implemented for testing the redundancy of these firewalls. Dynamic address translations (NAT), VPN connection status, either site-to-site or remote-access VPN connections, and TCP connections were selected for testing. Finally, the results for individual firewalls were compared. Where it was mainly researched and compared, how the computer network reacts to redundancy in individual types of firewalls.
|
| |
|
Multimedia transmissions in IP networks
Kejík, Tomáš ; Slavíček, Karel (referee) ; Grenar, David (advisor)
The topic of the master’s thesis is "Multimedia transmissions in IP networks". The goal of the thesis was to perform a theoretical analysis of multimedia transmissions in IP networks and to create a basic test set for generating and measuring network traffic. The theoretical part is devoted to the basic types of IP video transmission and the methods of transmitting in IP networks. Furthermore, protocols for controlling or distributing multimedia content are described. The practical part deals with creating the script written in the Bash language. The test script contains a set of functions that are created by different network tools. A Bash installation script has been created to install all the necessary tools automatically and conveniently. In order to generate multimedia and data traffic, the vlc and nc commands were used. The multimedia data editing was handled by the ffmpeg tool and to graphically display the measured data the smag and youplot tools were used. Additionally, the efficiency of the selected compression formats depending on the playback speed of the Raspberry Pi 4B single-board computer was also compared.
|
|
Comparison of cryptography performance of microcontrollers ARM Cortex-A
Škurla, Tomáš ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
The bachelor thesis deals with the measurement of cryptographic performance of ARM Cortex-A series microcontrollers. The theoretical part focuses on the description of concepts of cryptography, while at the same time explaining the principles of operation of individual cryptographic systems. Afterwards, thesis also describes the inner workings of ARM processors, their historical development, support for cryptography and detection of said support within processors. This is followed by defining the metrics for testing, part of which includes enumerating the hardware used in the testing process, with the focus being on the cryptography acceleration and encryption support. This also includes a description of the planned environment and software used in the testing. The practical part includes a description of the actual preparation of the defined environment and its possible modifications within the individual testing needs. The thesis concludes with an evaluation of the processed data and subsequent drawing of conclusions
|
|
IoT system for factory energy consumption optimization
Čuhel, Radim ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
This work deals with the measurement of electricity consumption in the production plant Draka Kabely in Velké Meziříčí. The main solution to the problem in the theoretical part is a description of the general distribution of electricity in the Czech Republic, a description of the production plant and the measurement of electricity together with the principles of regulation of measured energy. The practical part of the work is focused on the implementation of measuring sensors in the corporate network model. Setting and commissioning of sensors together with the possibilities of regulating the consumed energy. The result of this work will be used to improve the regulation and use of electricity in the production plant.
|
|
Measurement of qualitative parameters in the access network
Kejík, Tomáš ; Slavíček, Karel (referee) ; Grenar, David (advisor)
The theme of this bachelor’s thesis is „Measuring of qualitative parameters in an access network.“ The aim of this paper is a characterization of multimedia broadcasts in access networks and the creation of a functional network generator. The theoretical part of the paper is dedicated to analyzing key broadcasting parameters, which affect the resulting quality of network broadcast. Furthermore, used network protocols that are given for network and multimedia broadcast are analyzed. Simulation is done by using of GNS3 software. After that, transferred data were measured. Side effects affecting the functionality of the resulting transmission were subsequently analyzed. Another part of the paper is the practical part, which is focused on creation of a network generator by using the Bash language and making a script to facilitate turning on the generator for different counts of clients. At the end of the paper, the broadcast parameters were evaluated.
|
|
Modbus WiFi for pyrometer communication in a foundry
Moravčík, Adam ; Zeman, Václav (referee) ; Slavíček, Karel (advisor)
The bachelor's thesis focuses on the design of a method for connecting a pyrometer communicating via the MODBUS RTU interface to a WiFi network in the environment of the Brno foundry. The first part is devoted to the MODBUS protocol, its structure, principles, and possibilities of connection to the TCP / IP network, which is also used in WiFi. The second part is focused on an overview of available single-board computers and microcontrollers suitable for the implementation of the design. The third part deals with the hardware design of the device which realizes the connection of the pyrometer to the WiFi network. It describes the meaning of individual parts and the way of their interconnection. The fourth part deals with the software design of the program. It describes the individual blocks of the program and their function. The fifth part deals with testing the device using the simulation programs "Modbus Pool" and "Modbus Slave".
|
|
SDN for cloud computing
Kuklovský, Adam ; Frolka, Jakub (referee) ; Slavíček, Karel (advisor)
The theme of this bachelor work is SDN technology. It consists of both practical and theoretical part. In theory section, we described the main concept of the SDN network, functioning of OpenFlow protocol, comparison of individual open source SDN controllers and real onset of SDN technology. Practical section contains procedure of individual components being installed to create topology and to forward realization of laboratory task. The laboratory work also depicts the way of creation and modification of streams in the SDN network.
|