|
|
Detection and mitigation of cyber attacks at local area networks
Racka, Jan ; Lieskovan, Tomáš (referee) ; Gerlich, Tomáš (advisor)
The bachelor thesis is focused on the detection and mitigation of flood attacks in local area networks. The thesis can be divided into two parts. In the theoretical part, first flooding attacks are described. Then, the problem of attack detection is discussed in depth, including the implemented detection methods. Subsequently, the classification of detection tools by location is discussed and examples of detection tools are given. The last theoretical section is devoted to network mapping methods and topology detection tools. In the practical part, the design of the IDS and the test network is discussed. The network consists of three end devices namely: the IDS, the victim and the attacker. A Mikrotik router is used to ensure connectivity between all the devices. The IDS has been implemented in Python and is composed of individual modules that extend its functionality. The most important module is the detection module, which contains detection methods against SYN Flood, UDP Flood, ICMP Flood attacks and one universal comprehensive method against all flood attacks. The ARP Scan module allowed the IDS to map the network and use ARP queries to detect the presence of endpoint devices in the network. The learning module made it easier to set up rules for each detection method by monitoring network traffic over a period of time. It then determines appropriate rule values from the detected data. The SSH module provided IDS with the ability to proactively respond to attacks and disconnect the attacker from the rest of the network. ARP Scans also use the SSH module to discover information about guests. The IDS has been tested in both virtual and real environments. The results show that the developed detection methods work and the IDS can stop the attack in a reasonable time. ARP Scanning was also tested and was able to detect new guests on average in the first pass. The effect of IDS on communication was also monitored and found to be minimal.
|
|
|
Virtualization of laboratory tasks for the CISCO course
Abbasi, Farhad ; Komosný, Dan (referee) ; Kubánková, Anna (advisor)
Tato bakalářská práce se zabývá laboratorními úlohami pro novou certifikaci CISCO (CCNP ENARSI), seznámením se s tématy, výběrem nejvhodnějšího prostředí pro simulaci laboratorních úloh, vytvořením topologie pro každou laboratoř. Kromě topologie byl vytvořen konfigurační soubor (.txt) a nahrán do příslušného zařízení pro úlohy zaměřené na hledání problémů. V neposlední řadě bylo navrženo a implementováno řešení vzdáleného přístupu pro připravené laboratoře.
|
|
|
Řízení síťového provozu v bezdrátovém spoji WAN sítě
Kučera, Martin
The diploma thesis focuses on the issue of controll network traffic in wireless link. The requirements specification is suggested solution which is implemented and tested in laboratory conditions. The verification is carried out in the WAN network of TS-Hydro, s.r.o. The results are evaluated in the discussion.
|
|
|
Queue Management On Active Network Elements
Pancák, Matej
Delay is an QoS (Quality of Service) parameter which has effect on almost every service provided by Internet connection. Every network element increases delay because of the need of handling data. The introduction presents an optimization process performed on MikroTik device, using Mangle and Queue tools. This optimization has positive effect on this important parameter. In last part of this work is shown that positive effect on delay is obvious as the transmission speed has raised up, after optimization process has been applied.
|
|
|
Detection of local area network topology
Šípek, Martin ; Gerlich, Tomáš (referee) ; Martinásek, Zdeněk (advisor)
The bachelor thesis focuses on the detection and mitigation of Man-in-the-Middle attacks in the local network using its own implementation in the Python programming language. One of the most common Man-in-the-Middle attacks is ARP spoofing, which should be identified by the detection system and then mitigate it. The theoretical part of the thesis analyzes the current state of the issue, including a detailed description of the network analysis and tools which are used in this analysis. Cyber attacks are also described, namely Man-in-the-Middle and Denial-of-Service attacks. The practical part describes the realization of the experimental workplace and its detailed components and the installation and configuration of MySQL and Elasticsearch databases. It also focuses on the Suricata program, designed to analyze network traffic, on the actual implementation of Man-in-the-Middle attack detection and on the achieved results of testing of the implemented detection system.
|
|
|
Monitoring of services within active network elements by Mikrotik
Kamenář, Filip ; Slavíček, Karel (referee) ; Grenar, David (advisor)
This bachelor thesis deals with the monitoring of the VPN services on the networking elements Mikrotik. The theoretical part includes the description of RouterOS system, management options and networking devices used. The thesis consists of the description of the VPN services and analysis of PPTP, SSTP, L2TP and OpenVPN protocols, which are implemented in the practical part of this work. The theory also contains the description of monitoring devices included in the RouterOS system. In comparison, external tools are enlisted. Chosen monitoring tools are therefore implemented in the practical part of the thesis and in the monitoring script. The practical part of the bachelor thesis is focused on the establishment of VPN tunnels and its parameter measurement. The VPN clients are to be found in the Czech Republic, Ukraine and Egypt, which establishes the real conditions for network monitoring status. The final part of the work deals with the script, which is created for the automatic-monitoring of VPN service in the accessible network and sends the gathered data to the operators. The aim of the thesis is to illustrate the usage of integrated monitoring tools in the RouterOS system in the network built on the Mikrotik elements. The chosen monitoring service was the service VPN, which is being used for remote access to the local networks from distant part of the world by the corporations but also individuals. Individual monitored parameters are enlisted and compared depending on client geographic location.
|
|
|
RouterOS Devices Management System
Konečný, Jakub ; Novotný, Tomáš (referee) ; Hájek, Josef (advisor)
This bachelor's thesis describes a design and an implementation of an information system for management control and remote configuration of devices running MikroTik's RouterOS system. Primary purpose of the system is managing all compatible devices at one place. Within each device you can modify its DNS and DHCP settings, create or edit static DNS records and static routes. System is written in PHP using Nette Framework and MySQL database.
|
|
|
Optimization of Ethernet network in manufacturing plant
Kratochvíl, Petr ; Kubánková, Anna (referee) ; Krajsa, Ondřej (advisor)
This diploma thesis describes the work performed in the optimization of the corporate network in the company Alps Electric Czech to expand the amount of information obtained about the state of the network and thus improve the response of the IT department to potencial errors. During the optimization, a monitoring system was also deployed and its connection to the helpdesk and a tailor-made website running on the Flask microframework. With the gradual deployment, adjustments were made based on feedback from the IT department staff. Overall, the network has become more clarified, increasing the efficiency of maintenance and service.
|
|
| |
|
|
Communications MikroTik and IPS
Golovkova, Nataliya ; Lieskovan, Tomáš (referee) ; Gerlich, Tomáš (advisor)
The bachelor thesis is is focused on network attack problems and possible protection against their consequencies. The theortecical part describes the attacks that are currently among the most widespread with focus on the attack of Denial of Services (DoS). The next part of the thesis deals with detection and prevention systems fornetwork traffic monitoring with emphasis on the Suricata system. The following part is about getting familiar with the Mikrotik devices that are used in the practical part of the thesis. The practical part aims to provide a solution to mitigate the DoS attack in the communication between Mikrotik router and Suricata system. The communication is solved in a script using the php programming language.
|
guest ::
