|
|
DNS protocol client with a graphical interface suitable for lecturing
Sousedík, Tomáš ; Lattenberg, Ivo (referee) ; Jeřábek, Jan (advisor)
This thesis describes DNS protocol and messages it uses to obtain desired information. The protocol is described from its creation and occasions that caused the creation of the protocol. Later on are discussed multicast capabilities of name resolution this section is focused on mDNS and LLMNR. In the second part is detailed description of the structure of the messages and their useage. In the last part is described the design of the application, which was based on the specifications listed in RFCs. One chapter is devoted to a detailed description of the application and its individual parts. A large part is devoted to the testing. There are also described problems that occurred during application development and their solutions.
|
|
|
Localization of nodes in Internet using King system
Exler, Michal ; Müller, Jakub (referee) ; Komosný, Dan (advisor)
This thesis is focus on problematics of nodes localization in Internet. There are describe methods for prediction latency by using artificial coordinates systems and by using direct measurement. This thesis is primarily focus on method names King, which is estimates latency between arbitrary end hosts by using recursive DNS queries in system for translate domain name.
|
|
|
Wireless network attacks
Brusnický, Pavel ; Martinásek, Zdeněk (referee) ; Stančík, Peter (advisor)
Objective of this thesis is to point out to almost everywhere present flaw in realization of second level network security access to WiFi networks with using traffic tunneling over DNS protocol. Realization has been accomplished by existing utilities OzymanDNS, DNS2TCP, NSTX, Iodine, Heyoka. Measurements were done on realistic traffic on the network. The effort was to show outline of these implementations. Transfer speeds in some implementations can be marked as applicable thanks to high speeds, which are on the same level as broadband internet. Functionality was tested on WiFi network, where was also compromised PPTP VPN tunnel, its function was to provide security of the communication on wireless network due to absence of first level security mechanisms such as WPA, WPA 2 and so on, with the help of Asleap, which comes out of Cisco LEAP attack. At the end of the work are suggested possible countermeasures for securing network by the topology change of the network infrastructure or by implementing IDS.
|
|
|
Implementation of advanced filters based on packet classification using Linux
Malár, Lukáš ; Holešinský, Pavel (referee) ; Matocha, Tomáš (advisor)
The Master’s thesis ”The Implementation of the Advanced Filtering Based on the Packets’ Classification using Linux” is intended to the realization of an internet gateway. The gateway serves to make the connection between local network and the internet. The thesis contains a short theoretic description of parameters and types of QoS services. The classful and classless queues are mentioned in detail. The last theoretic part refers to the introducing of LDAP protocol and its usage. The practical part of this thesis captures the configuration of firewall, dns and radius server connected with LDAP databases. The thesis also contains detailed description of the production QoS by HTB with L7-filter including the compilation of system’s core. The end of the thesis contains the series of tests of created scripts.
|
|
|
Location of node real position on the Internet
Kopeček, Tomáš ; Müller, Jakub (referee) ; Komosný, Dan (advisor)
In this thesis I focus on finding the position of computers on the Internet. This need for locating computers originated in the last several years through the creation of overlay networks. For this activity there are many algorithms. This paper describes the King method that estimated the distance between communicating stations by using the domain name system. The aim of this work is to verify the accuracy of the King method in experimental PlanetLab network. This network provides access for more than 1000 stations worldwide.
|
|
|
Establishment of the Linux internet gateway using advanced filtering
Matocha, Tomáš ; Pust, Radim (referee) ; Jelínek, Mojmír (advisor)
The thesis Establishment of the Linux internet gateway using advanced filtering focuses on~the installation of~the Linux operating system on~the older computers, that functions as a gateway to connect clients in the internal network to the Internet. The thesis describes creation an advanced filter with using iptables. Shows some types of security against attacks from the Internet. The other chapters are discussed, advanced traffic control mechanism (such as a TC and a qdisc). The system queue, it is highly beneficial where it is necessary to hierarchically divide traffic between users. It describes types of queue and assembled configurations for clients in the internal network. Next chapter describes the DNS server caching-only type and application denyhosts, which increases the overall security system. Have your own DNS server is certified, especially if we want to reduce the data traffic. Last chapter describes the RADIUS server and its implementation using Apache and MySQL database. Furthermore, the configuration options are described and the examples of the particular configurations are provided. Finally, it presented a system for authentication through the RADIUS server. The thesis seeks to provide a~complex view of security and filtering.
|
|
|
Model of the metropolitan optical network
Prudík, Jiří ; Hudcová, Lucie (referee) ; Křivák, Petr (advisor)
The purpose of this master’s thesis is foremost to provide a simple guide how to build elements of optical metropolitan area network. The basic model consists to sequence of construction, network topology, passive and active parts. The collection contains examples of alternative technology such as Wireless LAN with different frequency. The optical network construction based on optical cable, fibres, splices, trays, adapters, connectors and active parts for example a lot of media convertor models. After that there are demonstrating type of wavelength division multiplexer used in metropolitan area network – passive planar PCL splitter. One of the passive planar splitter are used to increase optical fibre channel. At the end of the collection a simplified examples of used measurements – optical time domain reflectometry and optical fibre transmission. Contains standard protocols or reflectogram. The conclusion of this thesis summarizes costs of FTTb (Fibre To The Building) model of optical metropolitan area network in Czech republic and future contribution for society.
|
|
|
Universal linux server for small and medium companies enabling simple network control
Juřena, Stanislav ; Pust, Radim (referee) ; Burda, Karel (advisor)
The main object of this thesis was to design a computer network for small and medium companies which will be made among others from network server providing simple network control. The next task was to provide internet connection to subscribers of local area network, their security and access to common services. There had been discussed the choice of distribution of Linux operation system with regarding to demanded services, stability and long lasting operation in theoretical part. One part of the work is a theoretic preliminary to separate services, to the purpose of their using and to their weaknesses. The practical part deals with an installation and configuration of Debian operating system, launching the base services and the setting of selected monitoring programs.
|
|
| |
|
|
Google Apps - cloud computing in use
Strečko, Marek ; Pavlíčková, Jarmila (advisor) ; Benáčanová, Helena (referee)
This thesis aims to introduce a reader to cloud computing and Google Apps in order to install and use a solution based on Google Apps. First I would like to present basic facts about cloud computing and its division. The following part is dedicated to Google Apps with the history outline of the development of this system and the list of offered versions. Then I would like to describe in details all the most important services, which this system offers, focusing on a practical aspect of the Google Apps package. To be more precise, for what or why it could be useful for future users. The next part of my work presents how I have tried to install and make this system work in my own domain and it also describes small differences that I made in the installation. The following chapters are about verifying the functionality of the installation, the evaluation of costs associated with deploying of this application, presenting and searching reasons how to use various versions of Apps and their purpose. Finally I have compared advantages and disadvantages of Google Apps. I have evaluated the aim of the thesis, in the conclusion, if it is possible to create a working solution based on cloud computing without high financial costs and time effort along with the assessment of practical use.
|
guest ::
