|
|
Implementation of mechanisms providing Segment Routing for IPv6 (SRv6) using the FD.io VPP platform
Mjasojedov, Igor ; Dvořák, Jan (referee) ; Koláčková, Aneta (advisor)
The development of the mobile networks of fifth-generation (5G) accomplishes the requirements of transported services. New applications and services put high pressure on bandwidth, reliability and flexibility of the data transport. Due to this trend, network technologies need to be developed to address it and ensure transmission quality. This master's thesis aims at the Segment Routing (SR) concept and its commitment to improving transport quality in the transport part of 5G mobile networks. SR allows the integration of network programming into the traditional design of transport networks. SR uses either MPLS (SR-MPLS) or IPv6 (SRv6) on the forwarding plane. This thesis aims at SRv6. The main goal of the thesis is to design and implement a communication scenario for the transport part of the network with the SRv6 protocol. Docker platform is used to create a topology with all its nodes. The VPP platform is used to enable SRv6 on top of this topology. VPP has the ability to be configured via NETCONF protocol thanks to the Honeycomb agent, which can process NETCONF messages and propagate them to the VPP configuration. This configuration is done by the program Ansible, which can send NETCONF configurations to all SR nodes with Honeycomb installed. Testing and verification of the topology with all SRv6 policies is handled by the TRex traffic generator.
|
|
|
Setup of Application-Computation On-Premise Mini-Cloud Based on Kubernetes
Stuchlý, Samuel ; Ryšavý, Ondřej (referee) ; Jeřábek, Kamil (advisor)
Kubernetes je platforma na orchestráciu kontajnerov, na nasadenie a správu aplikácií v klastri. Cieľom tejto práce je porozumieť kubernetes a jeho komponentom a následne navrhnúť a sprevádzkovať optimálnu architektúru kubernetes klastru pre malý mini-cloud založený na kubernetes v areáli univerzity VUT. Táto bakalárska práca rozoberá základy kontajnerov, runtime kontajnerov, nástroje na orchestráciu kontajnerov, architektúru Kubernetes a jej komponenty a automatizačnú platformu Ansible. Ďalej obsahuje popis navrhnutej architektúry klastra, ktorá bude implementovaná. Príspevok tejto práce spočíva v návrhu architektúry kubernetes klastra, ktorý bude neskôr nasadený na pôde univerzity, pripravený na použitie.
|
|
|
Automatic Honeypots Deployment and Data Gathering
Ďuriš, Tomáš ; Pluskal, Jan (referee) ; Zobal, Lukáš (advisor)
This work deals with honeypots deployment automation, data collection from honeypots and the deployment of a monitoring system with alerts. The aim was to study the issue of honeypots, choose tools for their deployment, maintenance and collection of provided data together with creation of automatic deployment system for multiple types of honeypots. The first part of the work is devoted to the theory of honeypots, their distribution and type. Furthermore, the work mentions the comparison of individual configuration tools. The practical part is devoted to the use of a selected configuration tool Ansible in cooperation with existing open-source applications to build a fully automated system for the deployment and monitoring of honeypots, collection of provided data and their visualization. Puppet
|
|
|
Cyber exercises on the OpenStack platform
Fišarová, Veronika ; Hajný, Jan (referee) ; Lieskovan, Tomáš (advisor)
The goal of this bachelor thesis is to get acquainted with the platforms that are used to create the cyber ranges. The main part of thesis is focused on the cloud platform named OpenStack and its possibilites in creation of cyber ranges. The OpenStack installation options are compared and the selection of the instalation that is suitable for the KYPO project is made. The last part is devoted to the analysis of the KYPO project and the actual installation of OpenStack to the virtual station followed by the deployment of the KYPO platform on the modified OpenStack cloud and the commissioning of a training scenario.
|
|
|
Analysis of possible threats in old OS Linux version
Chovancová, Emília ; Dejdar, Petr (referee) ; Tomašov, Adrián (advisor)
The bachelor thesis is focused on the security aspect of an older version of a Linux based machine. The document is split into a theoretical part which contains a description of what operating system, kernel, UNIX, GNU/LINUX and Linux OS are in general. Then the description proceeds to explanation of active and passive attacks such as replay, masquarade, denial of service, man in the middle or listening and analysing the network. Afterwards it continues with description of potentially vulnerable spots that are common on operating systems. With the help provided from scanning software, especially Nmap and Lynis, the document proceeds to the practical part which contains various types of successful and unsuccesfful attacks such as password recovery, denial of service, spectre, brute force of a password and cross-site scripting. The last part covers the protection against succesfull attacks and adds a little bit more of additional protection in general in a form of an ansible script.
|
|
|
Virtualization platform for cyber range
Horváthová, Estera ; MU, Pavel Šeda, KPSK FI (referee) ; Lieskovan, Tomáš (advisor)
The bachelor thesis deals with the creation and operation of sandboxes for selected scenarios using the sandbox-creator tool, which is compatible with the KYPO project and uses the OpenStack platform. The theoretical section describes the technologies and tools used to create training platforms. Virtualization, containerization and cloud computing are described in the technologies and VirtualBox is described in the tools, Docker or OpenStack. The work also describes selected cyber range platforms that use these technologies. The practical part describes the compatibility of the selected platform with the KYPO project, the configuration tools used, the preparation of the experimental environment, the creation and operation of sandboxes for laboratory exercises, which are listed in the annex.
|
|
|
System for Automatic Filtering of Tests
Lysoněk, Milan ; Smrčka, Aleš (referee) ; Malík, Viktor (advisor)
Cílem této práce je vytvořit systém, který je schopný automaticky určit množinu testů, které mají být spuštěny, když dojde v ComplianceAsCode projektu ke změně. Navržená metoda vybírá množinu testů na základě statické analýzy změněných zdrojových souborů, přičemž bere v úvahu vnitřní strukturu ComplianceAsCode. Vytvořený systém je rozdělen do čtyř částí - získání změn s využitím verzovacího systému, statická analýza různých typů souborů, zjištění souborů, které jsou ovlivněny těmi změnami, a výpočet množiny testů, které musí být spuštěny pro danou změnu. Naimplementovali jsme analýzu několika různých typů souborů a náš systém je navržen tak, aby byl jednoduše rozšiřitelný o analýzy dalších typů souborů. Vytvořená implementace je nasazena na serveru, kde automaticky analyzuje nové příspěvky do ComplianceAsCode projektu. Automatické spouštění informuje přispěvatelé a vývojáře o nalezených změnách a doporučuje, které testy by pro danou změnu měly být spuštěny. Tím je ušetřen čas strávený při kontrole správnosti příspěvků a čas strávený spouštěním testů.
|
|
|
Utilization of Linux Containers for HW/SW Co-Design
Juřica, Jiří ; Přikryl, Zdeněk (referee) ; Hruška, Tomáš (advisor)
In this bachelor thesis a way of replacement standard virtual machines by Linux containers is described. The goal is to create a~fully working system for performing parallel jobs with prepared environments for software build and test purposes. For containerization the Docker platform was chosen, which is used with automation tool for computers preparation. The system is also connected with continuous integration tool called Jenkins. This solution proves that usage of the Linux containers is more efficient than older virtualization technologies. The due time of each job was shortened about 24 % in average. The main benefits of this thesis is the comparison of two ways of virtualization and the introduction to the Docker technology.
|
|
|
Automatic configuration of virtual infrastructure
Kadlíček, Jan ; Mašek, Jan (referee) ; Uher, Václav (advisor)
This master thesis focuses on the issue of automation of virtual infrastructure and available tools such as Ansible, Terraform and Puppet. The individual tools are compared here in sequence for installations or configuration creation. The result of this semester thesis is the selection of a suitable tool for automation of virtual infrastructure.
|
|
|
A tool for generating a random configuration of a cyber arena
Matisko, Maroš ; Kolařík, Martin (referee) ; Uher, Václav (advisor)
The master's thesis is focused on the design and implementation of a tool for generating configuration named Ansible. The result of using this tool is generated configuration, which contains random values chosen according to specified parameters and it was deployed on a virtual testing infrastructure. The theoretical part describes approaches of network automation in the process of deploying and configuration of network devices called Infrastructure as code. It also describes programme Ansible, which will be using the output of the implemented tool. The practical part of the thesis is focused on designing the functionality and internal structure of the tool, implementation of the tool and testing implemented tool as well as generated configuration.
|
guest ::
