|
Antivirus protection of a computer from a boot repository
Mlejnek, Jiří ; Malina, Lukáš (referee) ; Burda, Karel (advisor)
ABSTRACT Theme of the thesis is the design method of anti-virus protection with the use of an alternative boot store. Processed is a related issue of viruses and the possibility of defenses against them. This thesis is focused on the design and selection of components solutions enabling the execution of antivirus test from the undistorted by the operating system. With selected components continues to realize an alternative booting the operating system from a Windows platform computer network with automatic virus checking of all local disks. The results of inspection are transmitted using signed files on a network server and typically give an overview of the results of the individual tests.
|
|
Protection of the Critical Infrastructure of Society in the Czech Republic
Kubicová, Lenka ; Adamec, Vladimír (referee) ; Mika, Otakar Jiří (advisor)
Main content of this thesis is safety and protection of the critical infrastructure. It describes the history of the critical infrastructure in United States of America, European Union and in the Czech Republic. It describes the individual elements of critical infrastructure and the possible extraordinary events that threaten these elements. It explains basic terms from area safety and protection of the critical infrastructure and describes relevant laws. It evaluates safety and protection of critical infrastructure and proposes some possibilities for improvement the situation in the area.
|
|
Proactive and Reactive Approaches in Crisis Management
Chaloupková, Lenka ; Zelená, Veronika (advisor) ; Hajdíková, Taťána (referee)
Increasingly in today's dynamic business environment, serious crises are more often encountered and of increasing severity. The process which is intended to prevent or reduce the damage of a crisis is called Crisis Management. It is a rapidly changing area of business management, since it constantly develops over time, improving and enriching itself with new and better information. The aim of this thesis was to summarize current theoretical knowledge of proactive and reactive approaches in crisis management and to analyse crisis management in a selected company London Mining Plc. The theoretical part was developed through the analysis of currently available scientific literature and specialized publications. The practical part was based on the questionnaire survey method and semi-structured interview. The results showed that although the company was prepared for crises; acted proactively and had drawn up a detailed crisis plan that helped the company avoid many expected crises, the company went into administration due to a crisis caused by force majeure - a result of the falling global price of the main commodity and an unexpected outbreak of the Ebola virus in their principal place of business activity.
|
|
Security and Risk Analysis in Practice
Calta, Filip ; Luc, Ladislav (advisor) ; Veber, Jaromír (referee)
This thesis describes issues of risk analysis and security of company assets. Theoretical part of the thesis looks into the terminology of the topic with closer familiarization of procedures that are commonly used in risk analysis solutions and in company information security. Practical part of the thesis is focused on application of risk analysis using ISO/IEC 27005 methods on a concrete company, which is focused on distribution and consultation in the field of audio and video technology business. In risk analysis qualitative methods of valuation are used. An output of the analysis could be seen in added annex. The output of this thesis should be a treatment that shall prevent creation of risks, which had been found in previously defined area. Scope of the study is focused on purchase and sale.
|
|
Risk analysis of a municipality with extended powers Tyn nad Vltavou
DUDKOVÁ, Lucie
Risk analysis shows us what can happen, why it can happen, how it can happen, where it can happen and whom it will be affected. Risk analysis should bring an answer to the question of what action the city is subjected to threats, how much the city vulnerable to these threats, how can it be a high probability that the threat exploits a certain vulnerability and what impact it would have on the city could have. The general aim of the thesis was analysis of risk municipalities with extended powers Tyn nad Vltavou. The theoretical part was generally described legislation that is closely concerned with the issue of crisis management is very complex and is treated long line of laws, government regulations, as well as implementing regulations. Also, the basic concepts related to the issue of crisis management. Furthermore, in this thesis in theoretical part explains what they are threats and risks. The threat and risk becoming key concepts of security terminology. These concepts are closely linked and work together, so sometimes are confused or incorrectly used. On the basis of an analysis of the security environment in which the Czech Republic is, to identify specific threats to its security - security threats. It is listed here as well as the types of crisis situations, which are the basis for contingency planning. The methodical approach of risk analysis and the effectiveness of risk analysis is provided in relation to the selection methods of analysis and for what purpose can be selected. Another point is the emergency planning. Emergency planning is a preventive instrument whose sole aim is to identify existing risks and to raise awareness of possible risks in a given area, minimizing the harmful effects of emergencies on the lives and health of people, livestock, environmental, cultural and property, lay down measures to prevent or limiting the effects of the incident and the possible way of removing consequences. Mention is also emergency plan, structure and use of the municipality with extended powers. Another part is the crisis management of the municipality with extended powers. Area of crisis management from the perspective of the potential of state administration at the level of municipalities with extended powers is marked by the high complexity of dealing with the likely threat, because there are intertwined with all legal norms, regulations, decrees, instructions and guidelines. An important component of the theoretical part happens to the organizational rules of the municipal office of a municipality with extended powers in relation to the characteristics of the municipality with extended competence in crisis management and in a normal state. In terms of location analyzed town Tyn nad Vltavou was necessary mention of nuclear safety, radioactivity and princ iple of operation of the nuclear power plant. The practical part focuses on the gathering of available internal and general information and documentation concerning the town Tyn nad Vltavou and its surroundings and analysis of regulations, documents and methodologies related to the town Tyn nad Vltavou and its surroundings. The practical part presents characteristics of the administrative district of municipalities with extended powers Tyn nad Vltavou, the sociodemographic conditions, agricultural land resources, protection of the landscape and monuments, hygiene, environment, transport infrastructure, housing and recreation. It also states the threats and risks of the city and its surroundings, the composition of the Crisis Staff, Security Council and flood the city authorities. There is a risk analysis method KARS and given a semi-structured interview with a representative of the crisis management of the city. Processing and evaluation of acquired and now these results was performed in MS Word, MS Excel.
|
|
Information Security Risk Analysis in company operating in the distribution of healthcare and beauty products
Genský, Oliver ; Veber, Jaromír (advisor) ; Luc, Ladislav (referee)
This thesis processes the risk analysis topic, which is included in the overall information security management system. Thesis is divided into two parts; theoretical and practical. Terms and processes used in the risk analysis are included in the theoretical part. This section also describes standards that offer best practices of information security management, based on historical experience in variety of businesses. The defined terms and the chosen standards and methods are thereafter applied in the practical section, where risks of a particular business are analyzed and afterwards supported by an evaluation of risks and proposed solutions. This work is concluded by an overall information security report, which is consulted with the lead management of the business.
|
|
Safety and risk analysis in practice
Hlahůlek, Jakub ; Luc, Ladislav (advisor) ; Mildeová, Stanislava (referee)
The aim of this work is getting acquainted with the safety of the companie's assets. To practicly verify the information methods of security management on companies implemented through adequate standards. Then perform risk analysis on a specific company and assess the most serious risks. In conclusion propose safety measures to prevent risks which have been analyzed in cooperation with the owner of this company.
|
|
Procedures of information risk management of software companies.
Fischer, Radek ; Veber, Jaromír (advisor) ; Luc, Ladislav (referee)
Subject of the thesis is to take up possibilities of practical using of the Risk analysis which is a part of the Information security management system. Thesis is focused on risk management for typical organization which creates information systems. Main part of the thesis is the description of "ČSN ISO/IEC 27005:2013 - Information technology - Security techniques -- Information security risk management" standard, how could this standard be applied and also contains the explanation of typical examples of assets which can be in similar types of organizations. Theoretical part is aimed on explanation of key words in literature and closer description of organizations which creates this standard. Practical part shows creation of the Risk analysis methodology according to different accesses that are contained in this standard. Thesis continues with application of specific part of this methodology in practice. Assumed contribution of this thesis is better understanding to the process of making the Risk analysis methodology and possibilities its application in practice.
|
|
Utilization of SIEM systems for network events monitoring
Kopřiva, Milan ; Čermák, Igor (advisor) ; Habáň, Přemysl (referee)
In the last years we can observe an increasing number of security incidents varying in their focus, motives and success rate. Attacks are often conducted by very skilled organized groups with high knowledge base and they are increasing in their sophistication and efficiency. Because of those reasons information security is now one of the main fields of interest of IT experts. This thesis deals with Security information and Event Management technology and its usage for the detection of potentially harmful activity in a company's internal network. In the first chapter the elementary concepts of security are placed into the context of this thesis. Next chapter deals with security information and event management technology itself, its clear definition and describing the main functionality. The end of the theoretical part is dedicated to the author's view of the future and also to the problems concerning the implementation of SIEM solutions including return on investment calculation which has certain specifics in security field. Main benefit coming from this thesis is a clear description and creation of use cases aimed at the detecting suspicious activity in internal computer networks combined with their deployment in SIEM solution in real environment. The practical part of this thesis is dedicated to the configuration of the chosen device and its connection to the SIEM solution, and the assessment of usability of security events generated by the threat detecting device. Based on this assessment the use cases will be modelled and then deployed in the test environment. This thesis aims to bring on overall view into the security information and event management technology, starting with its definition and base functions. The primary goal of this thesis is use case designing for real time threat detection in a practical environment.
|
|
Exopolitics and Security in the 21. Century
Zelinka, Ladislav ; Prorok, Vladimír (advisor) ; Lisa, Aleš (referee)
The thesis introduces a new field of social sciences, the exopolitics, and poses a question, whether extra-terrestial intelligence constitutes a threat to security. The problem is discussed through analysis of primary data, which are in particular these: official documents, studies, letters, memoranda, witnesses' testimonies, official statements and other reliable evidence. Theoreticaly I refer to the existing exopolitical literature, mainly of M. Salla, and two selected papers. The aim is to show that the exopolitical study is actual, legitimate and well-founded and deserves more attention and credit. The thesis wishes to give an inspiring appeal to promote further study of the field through academia and other educational institutions.
|