|
|
Architecture and management of secure networks
Štangler, Jan ; Frolka, Jakub (referee) ; Člupek, Vlastimil (advisor)
This work is focused on the security of small to medium-sized networks with central administration, especially on the creation of a methodology for secure network design.The design of a secure network for a start-up IT company, using open-source software, is described. Deployment of the designed secure network, with central management, is performed and the connectivity of network elements are tested. The model simulates network traffic situations and network attacks using penetration testing techniques. In terms of the severity of the impact on network security, intercepted attacks are evaluated and immediately reported to responsible persons. Finally, the results of the intercepted attacks are processed and further actions are recommended.
|
|
|
Setup of Application-Computation On-Premise Mini-Cloud Based on Kubernetes
Stuchlý, Samuel ; Ryšavý, Ondřej (referee) ; Jeřábek, Kamil (advisor)
Kubernetes je platforma na orchestráciu kontajnerov, na nasadenie a správu aplikácií v klastri. Cieľom tejto práce je porozumieť kubernetes a jeho komponentom a následne navrhnúť a sprevádzkovať optimálnu architektúru kubernetes klastru pre malý mini-cloud založený na kubernetes v areáli univerzity VUT. Táto bakalárska práca rozoberá základy kontajnerov, runtime kontajnerov, nástroje na orchestráciu kontajnerov, architektúru Kubernetes a jej komponenty a automatizačnú platformu Ansible. Ďalej obsahuje popis navrhnutej architektúry klastra, ktorá bude implementovaná. Príspevok tejto práce spočíva v návrhu architektúry kubernetes klastra, ktorý bude neskôr nasadený na pôde univerzity, pripravený na použitie.
|
|
|
Ansible for Windows
Klíč, Jiří ; Očenášek, Pavel (referee) ; Trchalík, Roman (advisor)
The main purpose of this bachelor thesis is dealing with possibilities of automation of the computer management and acquisition of data about computers. This thesis focuses on automation of Windows-based computers managed by Linux operating system. The automation is performed by text user interface. It presents to the reader the used tool named Ansible and its components and usages. Here are discussed both methods of collecting of required data and their meaning and interpretation. Some data which are collected in this work are static, the rest of them use to change their values by time. There are also discussed possibilities how to manage the software equipment of the computer.
|
|
|
Tvorba podpůrných materiálů pro předmět Administrace databázových systémů
Pech, Adam
PECH, ADAM. Tvorba podpůrných materiálů pro předmět Administrace databázových systémů. Bachelors thesis. Brno: Mendel University Brno, 2023. Bachelor thesis describing SQL and NoSQL database technologies. Creation of study materials for students who study EBC-ADS at PEF MENDELU. Database theo-ry and it’s usage in practice. Deployment, administration, and workflow using da-tabase technologies. Usage of Docker, Ansible and Kubernetes.
|
|
|
Monitoring mezinárodní infrastruktury pomocí nástroje PRTG
Hošek, Petr
This bachelor thesis is mainly targeted to monitoring of international server infrastructure via PRTG tool. Main goals are to get familiar with monitoring protocols and identify needed services and values which has to be under monitoring and design the conectivity between monitoring tool and ticket system. Next step is to create functional model based on created design which will be intergrated into ticket system via API.
|
|
|
Jump server preparation and implementation for game scenarios in Cyber Arena
Komárek, Ladislav ; Šeda, Pavel (referee) ; Stodůlka, Tomáš (advisor)
Bachelor's thesis deals with the problematics of the containerization and virtualization. Thesis focuses on the OpenStack platform and the creation of a Jump server. The main purpose of the thesis is to create a Jump server with the SSH connection to the OpenStack instances. Thesis is divided into three parts - theoretical and practical, which has two parts. The analysis of virtualization and containerization possibilities for Jump server is included in the theoretical part of the paper. Description of the OpenStack platform and its functions is also contained in the theoretical part. Based on the theoretical analysis, a~Jump server was created in second and third part. After manually verifying the functionality of the Jump server, its creation was automated on the Openstack platform.
|
|
|
Automation of Cyber Arena backup and recovery processes in Ansible AWX
Fišarová, Veronika ; Lieskovan, Tomáš (referee) ; Stodůlka, Tomáš (advisor)
The master thesis focuses on the cyber range Cyber Arena and the OpenStack cloud platform, on which the Cyber Arena is built. The theoretical part of the work is dedicated to three essential technologies used in the construction of cyber ranges. These technologies are virtualization, containerization, and cloud computing. In the next part, the analysis focuses on the OpenStack platform and its essence in the Cyber Arena. This is followed by an introduction to the Ansible AWX automation platform, which acts as an intermediary between the Cyber Arena and OpenStack. The last part of the theory is dedicated to the issues of backups and recovery of OpenStack with the aim of improving the life cycle of the Cyber Arena. In the practical part, the creation of a development environment is described, consisting of the OpenStack platform and the AWX platform, in such a way as to best match the environment with the Cyber Arena. In this environment, an Ansible project is then implemented, which automates the creation of backups and subsequent recovery of the main OpenStack services. The project is implemented in such a way that the processes are transferable to new versions of OpenStack while maintaining the same deployment method.
|
|
|
Optimalizace správy koncových stanic za pomoci virtualizace a automatizace na Mendelově univerzitě v Brně
Olšar, Jakub
Olšar J. Optimization of terminal stations management with the help of virtualization and automation at Mendel University in Brno. Diploma thesis. Brno: Mendel University in Brno, 2021. The diploma thesis focuses on finding possible solutions to optimize the management of terminal stations and to improve the current situation with the acquisition of these devices. Finding an effective management solution was achieved through the introduction of a tool for mass management of end devices. Improving the process of acquiring equipment at the university is made possible through the automated collection of requirements, their summarization and the creation of an operational warehouse. The work further analyzes and examines the current state at the university in terms of management and acquisition of equipment. Based on the processed analysis, it proposes appropriate measures that lead to their correction, taking into account the financial side of the solution. Individual selected solutions are described and compared. The selected solution for streamlining administration became Microsoft Configuration Manager, which is then applied to the Department of terminal stations. In the conclusion, all the results of the work are summarized, which are incorporated into the concept of department management.
|
|
|
Operator for MariaDB Galera Cluster in OpenShift
Javorský, Lukáš ; Malinka, Kamil (referee) ; Januš, Filip (advisor)
Hlavným cieľom bakalárskej práce je vytvoriť riadený systém databázových serverov, ktorý je schopný sa adaptovať a reagovať na ich aktuálne zaťaženie. Riešenie tohto problému nachádzame práve v najnovšej platforme, určenej pre riadenie a nasadenie OpenShift 4 postavenej na základoch softwaru Kubernetes. Použitím operátora ako mysle celého OpenShift clustra, zodpovedného za nasadenie, vyvažovanie záťaže, detekciu zlyhaní a zotavenie po zlyhaní MariaDB kontajneroch, môžeme zabezpečiť, že bude databáza bezproblémovo fungovať, dokonca aj pri najvyšších špičkách záťaže počas dňa. Na replikáciu medzi databázovými servermi sa využíva softvér Galera vo vnútri každého MariaDB servera, ktorý zabezpečuje konzistentný obsah.
|
|
|
Secure deployment and testing of oVirt platform
Vágner, Vojtěch ; Martinásek, Zdeněk (referee) ; Dzurenda, Petr (advisor)
Virtualizační platforma oVirt nabízí široké spektrum možných konfigurací. Avšak žádná z~těchto konfigurací není bezpečnou bez předchozího zásahu v kontextu slepého nasazení platformy. Bezpečné konfigurace jsou definovány bezpečnostními standardy, se kterými je daná konfigurace v souladu. Jelikož oVirt je komunitní projekt, není lehké tento typ softwaru certifikovat v oblasti bezpečnostních standardů. Certifikace v oblasti bezpečnostních standardů je drahou záležitostí. Naštěstí, oVirt sdílí stejný základ s produktem Red~Hat~Virtualization, vůči kterému jsou určité bezpečnostní standardy aplikovatelné (FIPS 140-2, DISA STIG, Common Criteria). Most mezi Red~Hat~Virtualization a oVirt dává možnost bezpečných konfigurací i pro oVirt. Záměr této práce je následně určit, které konfigurace jsou podporovány danými standardy, tedy bezpečné, a jak ověřit, že jsou přítomné v dané nasazené platformě. To je realizováno pomocí skriptu ve formě Ansible Playbook, který zahrnuje Ansible Role. Každá role v rámci skriptu obhospodařuje evaluaci shody pro daný bezpečnostní standard.
|
guest ::
