|
|
Web application for generalizing SIEM correlation rules
Matušicová, Viktória ; Mikulec, Marek (referee) ; Safonov, Yehor (advisor)
The risk of attacks on companies by organized crime increases as technology advances. Attacks that focus on modifying data or gaining access to a company's network are constantly developed. The sophisticated nature of advanced threats distinguishes them from broad-based attacks that rely on automated scripts. However, organizations can mitigate this risk by utilizing a combination of appropriate tools. These include network flow monitoring, probes for detecting and preventing attacks, and Security Information and Event Management (SIEM) tools for correlating incidents and events. By leveraging these tools, suspicious behavior in the network can be identified, and measures can be taken to prevent and mitigate the impact of cyber attacks. The main contribution of this thesis is the development of a web application that serves as a general tool for managing correlation rules across various SIEM solutions. Through the use of this web application, publicly available Sigma rules can be managed and converted into target SIEM solutions. Users are given the ability to save these rules to their personal user section, alongside SIEM conversions and visual representations of technique coverage based on categorization by MITRE ATT@CK and LogSource of stored user rules. The theoretical part of the thesis comprises an analysis of security monitoring issues, an explanation of the benefits of the Sigma platform and an analysis of the web application. A use case model is defined, functional and non-functional requirements are specified to describe the resulting system. Additionally, the analysis of available tools for converting Sigma rules is performed. The practical portion of the thesis begins with a focus on the design of the web application, including the architecture of both the server-side and client-side components, as well as an explanation of the core functionalities. The resulting solution is then implemented, with detailed procedures for creating microservices, client-side development, and launching the web application. The final state of the project summarizes the result. The thesis concludes with a testing phase, the client side of the web application is evaluated through functional user interface screenshots. The thesis also includes a demonstration of the process for testing Sigma rules, which involves converting the rules using the web application and subsequently carrying out functional verification using the RSA NetWitness SIEM test solution.
|
|
|
Web Editor for SPARQL
Paulovič, Daniel ; Hynek, Jiří (referee) ; Burget, Radek (advisor)
Target of this thesis is to create web editor for query language SPARQL as component in javascript framework Vue.js and web application using this component to query over SPARQL endpoints. To implement editor were used CodeMirror library and PrimeVue library for user interface. Final version of component is publicly available as npm package. Benefit of this thesis is easily importable editor with many functions to simplify writing queries.
|
|
|
Web Interface for RDF Storage Browsing
Tomov, Patrik ; Hynek, Jiří (referee) ; Burget, Radek (advisor)
The aim of this thesis is to create a web interface for browsing the RDF storage, where the user will be able to manipulate its content. Within the storage, he will be able to create and delete repositories, add and delete repository content, view and interact with repository content, and also perform SPARQL queries within the repository. The client part of the application is written in Javascript using the Vue framework. The RDF4J server, which is deployed on the Apache Tomcat service, is used for the server part. Communication between the server and the client is secured using the RDF4J REST API. The resulting application allows to interactively and easily browse the content of the RDF storage.
|
|
|
Web System for Math Tests Creation
Czirok, Dávid ; Zemčík, Pavel (referee) ; Szőke, Igor (advisor)
This thesis aims to simplify the creation and evaluation of online math tests by automating the creation of tasks and their subsequent use in test building. It includes the proposal of a language intended for creating task templates and the implementation of an interpreter which processes it and generates concrete tasks. The final product is represented by a simple web system using this language and its interpreter, enabling teachers to create tasks and tests which students can take. The front-end of the application is built with technologies from the Vue.js ecosystem and the Vuetify library. The back-end uses the Express.js framework and the library Sequelize for communication with a MySQL database.
|
|
| |
|
|
Reportovací nástroj pre monitorovanie stavu energetickej siete v reálnom čase
Poľakovský, Michal
The goal of this diploma thesis is to develop a tool for monitoring electricity grid state in real-time. The theoretical part of the thesis covers real-time power grid monitoring and reporting knowledge, solutions and standards currently existing on the market and answers questions about what, how and why it should be monitored. This thesis describes TSCNET as electricity grid coordinator in Central Europe and Unicorn Systems and its current solutions for this industry. Also, modern approaches for development of the real-time BI are mentioned. Customised solution for the customer is presented. Chapter Material and methods introduces multiple tools used for the development of such a tool – Pentaho, JMS, MOM, AMICA, RIS, Vue etc. BPMN is used for ETL process modelling. Results describe the tool implementation based on the application integration principles, available solutions mentioned in methods part of this thesis and feasibility study. In the next part, physical model is created, communication interface is set, ETL diagrams are provided and all is implemented to generate CSV file output with grid state data. In addition, presentation layer is developed using Vue, NodeJS and client-server sockets. This layer visualises real-time tables containing grid state contingency and load-flow analysis results and also allows managers to regulate the newly implemented tool. Even though this tool presented in this thesis is deeply customised and developed for business processes of a specific company, it still can be the clue for further research of the real-time solutions and tools.
|
|
|
An Update of European Projects Portal and Its Enhancement by Identification of Results Related to New Call Topics
Furda, Jiří ; Kövári, Adam (referee) ; Smrž, Pavel (advisor)
This bachelor thesis deals with modification of an existing web portal focused on results of European projects. The output of this thesis is a portal working with newer version of the engine Elasticsearch. Compared to the previous solution, this portal allows to search topics of new calls. The theoretical part of the thesis describes practises used in web developement and frameworks used in this thesis and their principles. The practical part specifies the functioning of the whole portal and describes a specific implementation. The result is evaluated at the end of the thesis based on experiments.
|
|
|
Web-based visualization of anonymous credential scheme
Sohr, Jakub ; Malina, Lukáš (referee) ; Dzurenda, Petr (advisor)
This thesis explores attribute based credential schemes and the cryptographic preliminaries that are the building blocks of such schemes. The main focus of this thesis is the RKVAC scheme, which is implemented and visualized. This thesis also describes the entities and protocols of the RKVAC scheme and their roles within it. The implemented web application is designed to introduce the RKVAC scheme to the public.
|
|
|
Front-End for Generator of Test Data
Naňo, Andrej ; Křena, Bohuslav (referee) ; Smrčka, Aleš (advisor)
This bachelor thesis focuses on the design and development of the Dataster web applica- tion which provides data generating functionality for use in the testing of software. Web application is a part of the Testos platform which supports automation of software testing. Aim of the project was to create a web and application interface for the existing application dbgenx which is also part of the platform. Provided solution fulfills specified goals and is suitable for the deployment to a production environment.
|
|
|
Web control system for textile machine
Balázsy, František ; Jirgl, Miroslav (referee) ; Arm, Jakub (advisor)
This thesis deals with the design and implementation of web control application for textile machine. It consists of an HMI application based on the VueJS and Electron frameworks which communicates with the B&R PLC using the OPC UA protocol. For programming and production management uses MES microservice based on web realtime API. After it deals with deploying the application to a Linux station with kiosk configuration. The whole stack is implemented using JavaScript programming language and open-source software resources exclusively.
|
guest ::
