|
| |
|
|
Analysis of DDoS Backscatter Traffic in Network Flow Data
Marušiak, Martin ; Tisovčík, Peter (referee) ; Žádník, Martin (advisor)
This work focuses on detection of denial of service (DoS) attacks which utilize random spoofing of source IP address in attack packets. These types of attacks lead to generation of side effect in a form of backscatter that can be used to identify victims of such attacks. Backscatter analysis has so far been limited to unused address space ranges referred to as network telescopes. This work therefore proposes a new method of DoS attack detection via backscatter outside of network telescope environment where legitimate user traffic is also present. Furthermore proposed approach uses only abstracted traffic in a form of network flows. Presented method was implemented as part of NEMEA system and tested on real flow data capture provided by CESNET.
|
|
|
Optimization and algorithms for traffic engineering problems
Fajmon, Michal ; Popela, Pavel (referee) ; Hrabec, Dušan (advisor)
This master's thesis deals with optimization of traffic networks. There are discussed modeling methods for traffic and simplifications used in these models. Introductory part is focused on mathematical theory used to buid presented model. Main focus of this thesis was creation and optimization of the model which describes real world traffic network with traffic lights. Model was tested on both artificial and real data gathered in city Zlín. It was necessary to create generator which can produce suitable input data for model.
|
|
|
Applications of scheduling algorithms in railway transportation
Fajmon, Michal ; Kokrda, Lukáš (referee) ; Pavlas, Martin (advisor)
Bachelor’s thesis is focused on creation of mathematical model, which uses multiple methodsforwastecollectionatthelevelofmunicipalities.Modelisfocusedon railfreight transport. Main reasons are of lower production of emissions and reduction of burden on road traffic. In order to create model, the knowledge of graph theory, integer and linear programmingisused.CreatedmodelisimplementedinGAMSenvironmentonsmallscale data. At the end there are stated possibilities for further development of the model.
|
|
|
Application Data Extraction from Network Protocols
Januš, Filip ; Jeřábek, Kamil (referee) ; Holkovič, Martin (advisor)
This thesis is focused on design and implementation of tool for data extraction from captured network communication. The theoretical part deal with particular network protocols, its behavior, defines keywords and apprises with used tools. Second part is focused on design and implementation of extraction tool, design of declaration language for description of protocols. In the extractor are included third-party tools for analysis particular packets and reconstruction network flows. These tools together with designed declarative language are used due to requirement on easy extendability of designed tool. The end of this thesis is dedicated functional and performance testing of implemented tool.
|
|
|
Operational research in waste recycling
Camara, Assa ; Popela, Pavel (referee) ; Pavlas, Martin (advisor)
The bachelor thesis is aimed at finding and describing a mathematical model that reconstructs the actual current financial costs of collecting and collecting waste at the level of municipalities with expanded scope, which are not easily available and are needed for further planning in waste management. In order to create the model, the knowledge of optimization, statistics and graph theory are summarized in the text. The model is applied to real data in the GAMS environment. The results of the application are commented on and analysed. Based on this analysis, there are also possibilities to develop this model.
|
|
|
Communication of USB3.0 Chip with FPGA
Špeťko, Matej ; Viktorin, Jan (referee) ; Košař, Vlastimil (advisor)
SEC6NET is an abbreviation for project Modern tools for detection and mitigation of cyber criminality on the New Generation Internet. Project is focused on research and development of means for monitoring and analysing the network flow. Probes for monitoring IPv6 networks are developed within this project. Probes are using hardware acceleration based on FPGA platform. My thesis connects two technologies: FPGA and USB. The goal is to transfer data from the FPGA microchip to PC using Cypress EZ-USB FX3 microcontroller. The first part is focused on transferring data from FPGA to FX3 microcontroller. Second part describes the modification of FX3 firmware for getting maximum throughput. The last part focuses on implementing PC application for Linux operating system. The application receives data from the probe and saves them into hard drive using PCAP format.
|
|
|
On possible approaches to detecting robotic activity of botnets
Prajer, Richard ; Palovský, Radomír (advisor) ; Pavlíček, Luboš (referee)
This thesis explores possible approaches to detecting robotic activity of botnets on network. Initially, the detection based on full packet analysis in consideration of DNS, HTTP and IRC communication, is described. However, this detection is found inapplicable for technical and ethical reasons. Then it focuses on the analysis based on network flow metadata, compiling them to be processable in machine learning. It creates detection models using different machine learning methods, to compare them with each other. Bayes net method is found to be acceptable for detecting robotic activity of botnets. The Bayesian model is only able to identify the botnet that already executes the commands sent by its C&C server. "Sleeping" botnets are not reliably detectable by this model.
|
|
|
Fast Generator of Network Flows
Budiský, Jakub ; Dvořák, Milan (referee) ; Matoušek, Jiří (advisor)
Tato diplomová práce se věnuje analýze existujících řešení pro generování síťového provozu určeného k testování síťových komponent. Zaměřuje se na generátory na úrovni IP síťových toků a pokrývá návrh a implementaci generátoru, zvaného FLOR, schopného vytvářet syntetický síťový provoz rychlostí až několik desítek gigabitů za sekundu. K plánování toků využívá náhodného procesu. Vytvořená aplikace je otestována a porovnána s existujícími nástroji. V závěru jsou navrženy další vylepšení a optimalizace.
|
|
|
Optimization of Distributed Network Flow Collector
Wrona, Jan ; Grégr, Matěj (referee) ; Žádník, Martin (advisor)
This thesis is focused on the optimization of distributed IP flow information collector. Nowadays, the centralized collector is a frequently used solution but is already reaching its performance limits in large scale and high-speed networks. The implementation of the distributed collector is in its early phase and it is necessary to look for solutions that will use it to its full potential. Therefore this thesis proposes a shared nothing architecture without a single point of failure. Using the above proposed architecture, the distributed collector is tolerant to the failure of at least one node. A distributed flow data analysis software, whose performance scales linearly with the number of nodes, is also part of this thesis.
|
guest ::
