|
|
Proxy firewall
Kugler, Zdeněk ; Pelka, Tomáš (referee) ; Pust, Radim (advisor)
This diploma thesis deals with the topic of proxy servers and firewalls and considers other associated technologies and network techniques. It systematically describes the general issues of firewalls, with a special focus on proxy firewalls and their safety. Additional systems mentioned in this document are intrusion detection systems (IDS), antivirus systems and content control filters – as these are also connected with safety of networks, servers and workstations or with limiting various Internet sources. IDS systems can be typically supplemented with various additional applications or tools that enrich them and increase their potential – including graphic additions. This part is remembered too. Some systems can communicate with each other, which is successfully utilised (FW & IDS co-operation, for example). The purpose of the first large chapter is to present firewall technologies, to list firewall types, their basic functionality and to present the final comparison. It marginally mentions firewall applications in practice. Chapter two explains the theory of network address translation (NAT), deals with its functionality, safety and with limiting the NAT mechanism. Chapter three brings a comprehensive presentation of proxy servers. It explains their principle from the point of view of functionality and the specification of application areas. The chapter is complete with a clear list of proxy server types and their descriptions. The last chapter named Linux Proxy Firewall is the key part of the work. It deals generally with the Linux platform, the Debian GNU/Linux distribution, principles of safety policy, network configuration, network server safety, Linux firewalls (Netfilter framework, Iptables tool) and with the Squid proxy server. The following subchapters respect the previous structure: they describe the theories of intrusion detection systems, antivirus checks and content filtering based on different methods. All this is presented similarly to the previous chapters. A proxy firewall solution built on the Linux operating system has been proposed in the practical part. The Debian GNU/Linux distribution has been chosen, being very suitable for server use due to its features. This environment is also used for additional safety software contained in the proxy firewall: antivirus protection, content filtering and an intrusion detection system. The priority is the most comprehensive computer network security, which requires detection abilities with the broadest possible coverage in the area of network safety. The purpose of this diploma thesis is not only to describe the principle of operation of proxy servers and to compare them with other types and other systems, but it also brings my own proposed free solution, which increases network safety and has the ambition of comparing it with clearly commercial products available on the market.
|
|
|
Advanced methods of filtering network traffic in the Linux system
Peša, David ; Komosný, Dan (referee) ; Kacálek, Jan (advisor)
This master's thesis is meant to provide techniques in designing and building a standalone packet filtering firewall in Linux machines, mainly for small sites who don’t give much service to Internet users. It deals with attenuating the effect of the most common types of attacks using iptables. It guides how to design, implement, run, and maintain Firewall. Techniques for continuously monitoring attacks is attempted. It also give a historical, architectural and technical overview of firewalls and security attacks.
|
|
|
Study of Transfer Terminal in Ivančice
Chlíbek, David ; Pokorný, Ondřej (referee) ; Hruzíková, Miroslava (advisor)
My task in Bachelor´s Thesis is to examine the position of transfer terminal IDS in Ivančice. This task includes designing a new railway platform and new bus station near the railway crossing with the road number II/152 in km 5,535 000 nearby the railway station Ivančice. I assume that the passanger transport will end in the railway station Ivančice in the new terminal. The Railway to Oslavany will continue as a spur. My work consist in processing of 3 different variants. It is nesseseary to ensure sufficient capacity for 7 bus lines and 1 railway line. It is also important to provide adequate facilities and comfortable acces for travelers. I also deal with wheelchair sidewalks, crossworks and ramps. I try to solve the problem with high intensity of car and truck transport in centre of Ivančice. In my design is outlined design of new bypass road which will be led in the present railway corridor.
|
|
|
The Integrated Transport System in the South Bohemian Region
Matoušková, Aneta ; Mervart, Michal (advisor) ; Beneš, Ondřej (referee)
This This Master´s Thesis deals with the problems of the integrated transport system in the South Bohemian Region. After the explanation of the concept the integrated transport system follows the specification of the transport systems, the transport divisions and short introduction with the legislative framework. Further in my Master´s thesis I describe two chosen efficient and sophisticated integrated transport systems in the Czech Republic. Next part of this work deals with the current traffic situation in the South Bohemian Region. It follows the prices comparison for the tickets in the local transport and analysis the connection in chosen towns in the South Bohemian Region. The aim of this work is to make a suggestion of the integrated transport system, chose the model, tariffs and prices for the tickets. In the last part of this work I pay attention to the detected weaknesses and I suggest their possible solution.
|
|
|
Network infrastructure attacks and their mitigation using an IPS/IDS Snort
Olexa, Martin ; Mészáros, Jan (advisor) ; Buchalcevová, Alena (referee)
This paper gives an insight to detection and prevention systems regarding a network infrastructure. First part of the paper concentrates on key concepts in an information systems security and describes examples of attacks with tools used to mitigate them. A broader description is reserved for IDS/IPS systems with a focus on the Snort software. Second part of the paper analysis a sample attack abusing a vulnerable version of the OpenSSL library. This attack is used to describe a process of getting the necessary information, creating a Snort rule and testing the fixed vulnerability. Aim of this paper is to provide a manual and theoretical background regarding implementing an IDS/IPS solution in a computer network through an example attack.
|
|
| |
|
| |
|
|
Monitoring network system SAVO
Papík, Martin ; Zajíček, Milan ; Vaníček, Petr
Target of this project is creating of the functional alert system for network attacks named SAVO (Secure AV Outbound). This system is dedicated for AV (Academy of Sciences of the Czech republic) network. Informations which obtained from monitoring (analysis) will be aviable for responsible ICT departments.
|
|
|
Municipal transportation system of Košice
Pavúková, Marianna ; Zelený, Lubomír (advisor) ; Paholok, Igor (referee)
The aim of this bachelor thesis is to analyze the present condition of municipal transportation system of Košice, point out to the problems and planned solutions. In the first theoretical part there is history of public transportation in the world, basic terms and the importance of the integrated transport systems. The second practical part describes characteristic of Košice city, condition of the public transportation and future plans for building the integrated transport system in Košice.
|
|
|
Munich Transport and Tariff Association
Sedlák, Martin ; Zelený, Lubomír (advisor) ; Itterheim, Martin (referee)
This final bachelor thesis describes the theoretical nature of the integrated transport systems, their advantages and disadvantages in general and their future development. The main objective is to analyze a particular integrated public transport system or more precisely The Munich Transport and Tariff Association, and last but not least compare with other integrated transport systems of other urban areas in Europe.
|
guest ::
