|
|
Implementation of Communication Middleware in JAVA ME
Martinák, Jan ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
In almost each enterprise there is a software support for business processes. With a growing number of the applications there is an increasing demand to integrate those applications in order to have an effectively working environment, which generates profit. In enterprise applications integration there are few principles, each with their own advantages and disadvantages. However, the message-oriented middleware layer proves to be the best solution to many integration scenarios. This work deals with an enterprise of applications running on multifunction embedded office devices based on Java ME platform, and introduces an in-house developed communication middleware layer to integrate those applications. The resulting software component applies principles of messaging in a printing management SOA environment to communicate with a print server using a designed set of messages.
|
|
|
DMA Controller and Network Interface Card Driver for COMBO2 Platform
Kaštovský, Petr ; Kořenek, Jan (referee) ; Martínek, Tomáš (advisor)
There is a family of COMBO cards used for netork monitoring acceleration being developed on the Liberouter project, which is the CESNET's research activity. These cards are equipped with Xilinx's programmable field array. To enable usage of classic tools for network monitoring and management, not only application specific tools, it is necessary to implement network interface card on the platform, that realizes packet reception and transmission through the standard Linux kernel interface. This thesis describes the design and implementation of network interface card's key components. Those are DMA controller and Linux device driver.
|
|
|
Platform for Rapid Development of Network Devices
Tobola, Jiří ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
This thesis deals with the design and implementation of an FPGA-based platform for rapid development of network applications for the COMBO cards family. The proposed platform includes a generic data transfer protocol - FrameLink, a set of tools for FrameLink manipulation, network interface blocks for 1 Gigabit Ethernet, high-speed connection to the software layer via PCI, PCI-X or PCI Express bus and a set of IP cores for network traffic analysis and processing. The benefits of the proposed platform are demonstrated on design and implementation of a network interface card, hardware firewall and exporter of unified packet headers.
|
|
|
Hardware Acceleration of Image Filtering
Fiala, Martin ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
This master's thesis contains introduction to image filtration problems, especially to theoretical outlets, whose origin lies in linear systems theory and mathematical function analysis. There are described some approaches and methods which are used to image smoothing and for edge detection in an image. Mainly Sobel operator, Laplace operator and median filter are covered. The main contents of this project is discussion of some approaches of hardware acceleration of image filtering and design of time effective software and hardware implementations of filters in a form of program functions and combinational circuits using theoretical knowledges about time complexity of algorithms. Hardware and software implementation of named filters was done too. For every filter, time of filtration was measured and results were compared and analyzed.
|
|
|
EEG Biofeedback Human Brain - Computer Interface
Kněžík, Jan ; Kořenek, Jan (referee) ; Marušinec, Jaromír (advisor)
This master thesis dwells on EEGbiofeedback (also called Neurofeedback) interface of human brain and the computer and its concrete realization in Java programming language. This system is founded on the basis of the computer, which is accomplishing biological feedback (biofeedback) and the electroencephalography (EEG) by helping that state's scanning of user's brain is realized. By this way is possible to practise the human brain effectively to achieve better concentration, the elimination of sleeping and learning deficiency. Hereafter is the suggestion of direction control of computer mouse by EEG device incorporated, which makes it possible for the man to regulate the direction of the cursor's movement on the screen by the frequency of brain's oscillation. The motivation for solution of this problem is the effort to help to handicapped people to communicate with surrounding world. The introduction of this paper contains the basic facts about human brain, electroencephalography and EEG biofeedback. The following chapters dwell on the specification of claims to developed application, its suggestion and description of actual realization. The final part relates to the BCI (Brain-Computer Interface) systems and suggestion of computer's control by EEGappliance with evaluation of attained results.
|
|
|
Weather Forecast Based on Different Sources
Hořák, Martin ; Kořenek, Jan (referee) ; Novotný, Tomáš (advisor)
Bachelor thesis deals with the weather forecast through the artificial neural network with backpropagation method. The forecast is based on data obtained from freely accessible services offering weather information. The created application downloads and saves the forecasts from servers and creates a new forecast. The results of the prediction are being compared with the reality and the original services.
|
|
|
Adaptive Sampling of Input Packets Implemented in FlowMon Probe
Kaštovský, Petr ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
There is a FlowMon probe being developed in a Libeouter project that is used for passive network measurements. The probe has better stability and accuracy than sofware based solutions even under a heavy load or network attack. To guarantee a precision of results there is a need to data reduction to prevent measuring system overload. There are few kinds of data reduction. Method used in the FlowMon probe is called sampling. Adaptive sampling unit sets the sampling rate (rate of processed and discarded packets) according to actual state of measured network.
|
|
|
Statefull Processing of TCP/IP Flows
Košek, Martin ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
Network security systems become an essential part of many network structures in both company and university domains. These systems however require a~higher semantic level of network traffic analysis like statefull filtration or TCP stream reassembling. This bachelor work deals with an architecture of flexible network platform capable of statefull processing at multigigabit speeds. It allows to analyze and process incoming network traffic with a flow-based approach rather than packet-based one. The proposed architecture is flexible in supporting wide range of applications, allows performance scalability and state information consistency checking. The advantages and flexibility of proposed platform is demonstrated on several network security applications.
|
|
|
Reputation of Malicious Traffic Sources
Bartoš, Václav ; Lhotka,, Ladislav (referee) ; Vozňák, Miroslav (referee) ; Kořenek, Jan (advisor)
An important part of maintaining network security is collecting and processing information about cyber threats, both from network operator's own detection tools and from third parties. A commonly used type of such information are lists of network entities (IP addresses, domains, URLs, etc.) which were identified as malicious. However, in many cases, the simple binary distinction between malicious and non-malicious entities is not sufficient. It is beneficial to keep other supplementary information for each entity, which describes its malicious activities, and also a summarizing score, which evaluates its reputation numerically. Such a score allows for quick comprehension of the level of threat the entity poses and allows to compare and sort entities. The goal of this work is to design a method for such summarization. The resulting score, called Future Maliciousness Probability (FMP score), is a value between 0 and 1, assigned to each suspicious network entity, expressing the probability that the entity will do some kind of malicious activity in a near future. Therefore, the scoring is based of prediction of future attacks. Advanced machine learning methods are used to perform the prediction. Their input is formed by previously received alerts about security events and other relevant data related to the entity. The method of computing the score is first described in a general way, usable for any kind of entity and input data. Then a more concrete version is presented for scoring IPv4 address by utilizing alerts from an alert sharing system and supplementary data from a reputation database. This variant is then evaluated on a real world dataset. In order to get enough amount and quality of data for this dataset, a part of the work is also dedicated to the area of security analysis of network data. A framework for analysis of flow data, NEMEA, and several new detection methods are designed and implemented. An open reputation database, NERD, is also implemented and described in this work. Data from these systems are then used to evaluate precision of the predictor as well as to evaluate selected use cases of the scoring method.
|
|
|
Software-Controlled Network Traffic Monitoring
Kekely, Lukáš ; Antichi, Gianni (referee) ; Lhotka,, Ladislav (referee) ; Kořenek, Jan (advisor)
Tato disertační práce se zabývá návrhem nového způsobu softwarově řízené (definované) hardwarové akcelerace pro moderní vysokorychlostní počítačové sítě. Hlavním cílem práce je formulace obecného, flexibilního a jednoduše použitelného konceptu akcelerace použitelného pro různé bezpečnostní a monitorovací aplikace, který by umožnil jejich reálné nasazení ve 100 Gb/s a rychlejších sítích. Disertační práce začíná rozborem aktuálního stavu poznání v oborech síťového monitorování, bezpečnosti a způsobů akcelerace zpracování vysokorychlostních síťových dat. Na základě tohoto rozboru je formulován a navržen zcela nový koncept s názvem Softwarově definované monitorování (SDM). Klíčová funkcionalita uvedeného konceptu je postavená na hardwarově akcelerované, aplikačně specifické (řízené), na tocích založené, informované redukci a distribuci zachycených síťových dat. Toto je zajištěno spojením vysokorychlostního hardwarového zpracování s flexibilním softwarovým řízením, které tak společně umožňují jednoduchou tvorbu různých komplexních a vysoce výkonných síťových aplikací. Pokročilé optimalizace a vylepšení základního SDM konceptu a jeho vybraných komponent jsou v práci též zkoumány, což vede k návrhu zcela unikátní a obecně použitelné FPGA architektury modulárního analyzátoru hlaviček paketů a vysoce výkonného klasifikátoru paketů založeného na kukaččím hashovaní. Nakonec je vytvořen vysokorychlostní SDM prototyp postavený nad FPGA akcelerační síťovou kartou, který je podrobně ověřen v podmínkách nasazení do reálných sítí. Jsou změřeny a diskutovány dosažitelné zlepšení výkonností v několika vybraných monitorovacích a bezpečnostních případech užití. Vytvořený SDM prototyp je rovněž nasazen v produkčním monitorování reálné páteřní sítě sdružení Cesnet a byl komercializován společností Netcope Technologies.
|
guest ::
RSS feed.