|
Cyberattack generator
Gajdušek, Ondřej ; Jeřábek, Jan (referee) ; Hajný, Jan (advisor)
This work deals with the enhancement of software which generates cyberattacks. These enhancements are focused on application layer of ISO/OSI model. The firsh part of the work contains general description of cyberattacks. Concrete attacks which this work is dealing with are described more concretely. Next part deals with describing generator software and its enhancement. The last part is describing testing of newly implemented cyberattacks.
|
|
Implementation of plugins for JMeter
Švehlák, Milan ; Člupek, Vlastimil (referee) ; Martinásek, Zdeněk (advisor)
This thesis discusses the load testing tool JMeter and its opportunities for expansion by modules carrying out cyber attacks of the type Denial of Service (DoS). To begin with, there is a theoretical overview of cyber attacks of this type. The following chapter, talks about the JMeter tool, namely its functions and expansion options. After that, it is proceeded to the actual design and realization of the modules. The module implementing the attack HTTP Flood is created first. This module uses internal functions of the program JMeter. This new module is tested. Next chapter folows the procedure of creating modules, that use external generator of network traffic. Modules SYN Flood, ICMP Flood and NTP Flood are implemented using the generator Trafgen. Module implementing attack Slowloris uses a Python script as a generator of the attack. Finally, all the new modules are tested.
|
|
Computer Identity Based on Its Internal Clock Skew
Franková, Barbora ; Matoušek, Petr (referee) ; Polčák, Libor (advisor)
Thesis deals with remote computer identification based on its internal clock skew. It describes various methods to collect and evaluate time-related data extracted from TCP, ICMP and Javascript. Software package that implements some of those methods is attached as well. During the work, many experiments were carried out to find out possible effects of certain factors. Tests were aimed on software (operation systems, web browsers and time synchronization) as well as hardware (temperature, power source, distance and network connection type) of the remote systems. Interesting results were discovered in areas of IPv4/IPv6 address pairing and NTP time synchronization.
|
| |
|
Navigation System for Pilots
Kryl, Jan ; Vlk, Jan (referee) ; Mlích, Jozef (advisor)
This diploma thesis concerns design and creation of a navigational system as a tool for pilots of helicopters and ultralight planes. Choosing required functions is critical part for realization of this project. The paper also contains description of draft of application.
|
| |
|
lmprovement Proposal of Network Services Model for Techniserv IT s.r.o. company
Lavický, Jindřich ; Hanzlík, Jiří (referee) ; Ondrák, Viktor (advisor)
The bachelor thesis describes a proposal of network services model for Techniserv IT s.r.o. company. It analyses the present state of IT infrastructure in organization and suggests appropriate and economical solutions. It describes constituent areas of network services and their advantages. In detail, it focuses on the area of network services implementation, which is crucial for this type of work. At the end, it proposes solutions and evaluates their assets for a company.
|
|
Vulnerabilities assessment for industrial protocols
Zahradník, Jiří ; Fujdiak, Radek (referee) ; Blažek, Petr (advisor)
Thesis deals with testing of selected vulnerabilities from the IEC 61850 standard and following design of mitigation measures for selected vulnerabilities. Author simulated vulnerabilities of the GOOSE protocol, NTP attack and attack ona MMS client. Those attacks were GOOSE stNum, GOOSE semantic, GOOSE test bit,GOOSE replay, GOOSE flood, NTP spoofing and MMS password capture. Attacks on protocols GOOSE and MMS were successful, attack on NTP was only partially successful since the device confirmed receiving spoofed time, however it did not change it’s inner clock. Author then designed possible mitigation measures. Tool for automatic testing of selected vulnerabilities, parser for the GOOSE protocol and lightweight multiplatform parser for configuration files were created as well.The outcome of this thesis allows the implementation of lager scale tool for penetration testing of industrial networks as well as it allows implementation of discussed mitigation measures.
|
|
Wireless Communication in Fire Sport
Pelka, Tomáš ; Mrázek, Vojtěch (referee) ; Vašíček, Zdeněk (advisor)
This work describes the design of wireless timer for fire sport disciplines. Its aim is to replace long wires with wireless communication while preserving equal or better reliability. Important part is the need for clock synchronization between wireless modules. Related topic is selection of suitable synchronization algorithm and communication protocol. The proposed system was realized in form of prototype using Texas Instruments's development platform LaunchPad EXP 430 FR4133 and wireless modules with Texas Instruments's chip CC1101. Parameters of designed system (especially the accuracy of time synchronization and measurement) were verified in laboratory.
|
|
Vulnerabilities assessment for industrial protocols
Zahradník, Jiří ; Fujdiak, Radek (referee) ; Blažek, Petr (advisor)
Thesis deals with testing of selected vulnerabilities from the IEC 61850 standard and following design of mitigation measures for selected vulnerabilities. Author simulated vulnerabilities of the GOOSE protocol, NTP attack and attack ona MMS client. Those attacks were GOOSE stNum, GOOSE semantic, GOOSE test bit,GOOSE replay, GOOSE flood, NTP spoofing and MMS password capture. Attacks on protocols GOOSE and MMS were successful, attack on NTP was only partially successful since the device confirmed receiving spoofed time, however it did not change it’s inner clock. Author then designed possible mitigation measures. Tool for automatic testing of selected vulnerabilities, parser for the GOOSE protocol and lightweight multiplatform parser for configuration files were created as well.The outcome of this thesis allows the implementation of lager scale tool for penetration testing of industrial networks as well as it allows implementation of discussed mitigation measures.
|