|
|
Traffic detection and analysis using SSL/TLS
Hutar, Jan ; Dvořák, Jan (referee) ; Smékal, David (advisor)
This diploma thesis deals with a detection and analysis of secure connections of electro- nic communication through SSL/TLS protocols. The thesis begins with introduction to SSL/TLS protocols. Thereafter, an analysis of messages used to establish secure con- nections using STARTTLS and postal protocols SMTP, POP3, and IMAP was made. Metadata detection and extraction of secured simplex and duplex connections take place using deep packet inspection tools. The tool of choice is the nDPI library from the Ntop project. The library was extended to detect the connections and extract the metadata based on studies and analysis of transmitted messages. Finally, testing is performed on a training data set and a basic analysis of acquired metadata is made.
|
|
| |
|
|
IMAP extension for mobile devices
Kundrát, Jan ; Peterka, Jiří (advisor) ; Spousta, Miroslav (referee)
With the mass availability of smartphones, mobile access to e-mail is gaining importance. Over the years, the IMAP protocol has been extended with many features ranging from extensions adding new functionality to those improving efficiency over an unreliable network. This thesis evaluates the available extensions based on their suitability for use in the context of a mobile client. Three new extensions have been developed, each improving the protocol in a distinct way. The thesis also discusses how most of these extensions were implemented in Trojitá, the author's free software open source IMAP e-mail client.
|
|
| |
|
|
E-mail Client for OpenMoko
Krátký, Pavel ; Bartoň, Radek (referee) ; Smrž, Pavel (advisor)
Openmoko is a revolutionary Linux platform with an expanding community of developers. The goal of the project is to create a user-friendly email client programmed in Java and analyze the difficulties of application development on this platform. The thesis discusses possibilities of development of this kind of applications, especially those using SWT widget toolkit. JavaMail library which handles the electronic mail is described as well. In conclusion we demonstrate advantages and disadvantages of the created program. The outcome of this thesis is an email client designed for mobile Linux devices with touch control and an introduction to software development on the Openmoko platform.
|
|
|
Intelligent Mailbox
Pohlídal, Antonín ; Drozd, Michal (referee) ; Chmelař, Petr (advisor)
This master's thesis deals with the use of text classification for sorting of incoming emails. First, there is described the Knowledge Discovery in Databases and there is also analyzed in detail the text classification with selected methods. Further, this thesis describes the email communication and SMTP, POP3 and IMAP protocols. The next part contains design of the system that classifies incoming emails and there are also described realated technologie ie Apache James Server, PostgreSQL and RapidMiner. Further, there is described the implementation of all necessary components. The last part contains an experiments with email server using Enron Dataset.
|
|
|
Configurable Security Email Proxy
Židek, Stanislav ; Samek, Jan (referee) ; Cvrček, Daniel (advisor)
This bachelor thesis deals with design and implementation of multiuser configurable system capable of securing communication via electronic mail. Emphasis is put especially on remote configuration. It also describes existing protocols used for this communication and some of the mechanisms that can secure this communication from different points of view.
|
|
|
Detection of Dictionary Attacks on Network Services Using IP Flow Analysis
Činčala, Martin ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
Existing research suggests that it is possible to detect dictionary attacks using IP flows. This type of detection was successfully implemented for SSH, LDAP and RDP protocols. To determine whether it is possible to use the same methods of detection for e-mail protocols virtual test environment was created. I deduced the characteristics of attacks in flows from the data, which I gained from this virtual environment. Than I chose the statistical value that separates the attacks from legitimate traffic. Variance of specific flow parameters was chosen as main characteristic of attacks. IP addresses with flows that have small variance of chosen parameters and high frequency of packet arrival are considered untrustworthy. Variance is calculated from IP history to rule out false positives. The IP history of legitimate user contains variation of flows which prevents marking this IP address as dangerous. On the basis of this principal the script, which detects the attacks from the nfdump output, was created. The success of detection of the attacks was tested on classificated data from the real environment. The results of tests showed, that with good configuration of marginal values the percentage of detected attacks is high and there are no false positives. Detection is not limited only on mail protocols. With regard to universal design, the script is able to detect dictionary attacks on SSH, LDAP, SIP, RDP, SQL, telnet and some other attacks.
|
|
|
Implementation of multi-purpose server based on WINDOWS
Depiak, Petr ; Kouřil, Jiří (referee) ; Pfeifer, Václav (advisor)
This thesis puts brain to the pieces of knowledge of the network services which are occurred in the server systems. These services are related to data storing, transport and data interpretation. Basically there are transport services which are used by FTP and SMB protocols. These protocols define them generally and their security too. Next section describes principles and application possibilities of electronic mail. It is based on SMTP, POP3 and IMAP protocols. The important part of this thesis is the World Wide Web service exploiting the HTTP protocol. It also refers to creation of dynamic presentation of electronic document by using the MySQL relational database and PHP script language. Practical part goes out of the theoretical part discussed above and all services are implemented on the MS Windows 2003 Server EE R2 platform. The main scope is oriented to the highest usage of data security within the available software. Other part presents the introduction to hosting of the Novell eDirectory service. It is practically applied on the MS Windows platform. This application also includes the administration of eDirecroty service by using the standard tool. This tool allows the administration though the web interface.
|
|
|
System for automatic evaluation of email messages
Frkal, Jan ; Červenka, Vladimír (referee) ; Koutný, Martin (advisor)
This diploma thesis deals with the design and realisation of system for automatic evaluation of e-mail messages. The system works with PHP language and MySQL database. It also allows automatic synchronisation. During the synchronisation e-mail messages are downloaded and saved using IMAP or POP3 protocol. Subsequently, the messages are analysed. During the analysis the reports are classified into types, according to pre-defined keywords. The system also works with black lists and white lists. If the sender of an e-mail is during the synchronisation found in the blacklist, that e-mail will be skipped. On the contrary, if the sender of an e-mail is found within the white list, that e-mail will be excluded from keyword matching and from the list is type and category loaded. Most of the values from the carried out evaluation of the e-mails can be clearly seen in advanced statistics. Pie charts and numerical statistics are available. Access to the system is protected by a login. Therefore, login can only registered users.
|
guest ::
