|
|
Analysis of DDos data with clustering
Krátký, Matěj ; Šišmiš, Lukáš (referee) ; Setinský, Jiří (advisor)
This thesis focuses on the detection of distributed denial of service (DDoS) attacks using clustering algorithms. In the first part, different types of DDoS attacks and approaches to identify them are described. Next, the thesis studies clustering methods, specifically hierarchical and k-means clustering, for analyzing the network traffic associated with these attacks. It also includes the design of a detection system suitable for detecting DDoS attacks. This is followed by a description of the implementation of this system required for the analysis phase. The main part of the work consists of performing experiments on the available dataset and evaluating the effectiveness of the methods, parameters and attributes combinations used. Finally, the thesis discusses the application of the findings and the possibilities for further research in this area.
|
|
|
Optimization of DDoS Attack Mitigation based on Machine Learning
Banák, Filip ; Šišmiš, Lukáš (referee) ; Kučera, Jan (advisor)
Útoky DDoS, ktoré využívajú protokol TCP patria stále medzi tie najbežnejšie. Táto práca cieli zlepšiť úspešnosť detekcie DDoS útokov využitím informácií dostupných v TCP SYN správach. Odtlačky TCP SYN správ sú navrhnuté ako dodatočný zdroj dát pri počítaní charakteristík na vyhodnotie prítomnosti DDoS útoku. Kombinácia existujúceho systému na extrakciu a agregáciu charakteristík s existujúcim detektorom anomálií založeným na autokodéroch je zoptimalizovaná a rozšírená na využitie SYN odtlačkov. Experimentálne výsledky ukazujú obstojné zlepšenie detekcie DDoS útokov na relevantných dátových sadách. Detektor sa trénuje a testuje respektívne 16-krát a 95-krát rýchlejšie. Systém na extrakciu a agregáciu je 23-krát rýchlejší.
|
|
|
Prostředí pro testování algoritmů potlačení útoků DDoS
Patová, Pavlína ; Šišmiš, Lukáš (referee) ; Kučera, Jan (advisor)
The work is focused on creating a test environment for simulating DoS attacks. This environment is useful for verifying the vulnerability of networks and services against the phenomenon of DDoS attacks, therefore it will be used to test the tools and techniques developed to defend against DDoS attacks. The outputs of these experiments can then be used as recommendations for network administrators to help improve the refensibility of their systems. The resulting tool is implemented in Python using the PyTest module. We were able to implement many of today’s most common DoS attacks, such as floods and amplification attacks. It is thus possible to test services against these most serious DDoS threats. The resulting tool is easily extensible to other methodologies or attack types, so it can also be used for emerging DoS attacks in the future.
|
|
|
Distributed system for suppression of DoS attacks
Beneš, Dalibor ; Žádník, Martin (referee) ; Šišmiš, Lukáš (advisor)
Ochrana před distribuovanými útoky odepření služby (DDoS) patří mezi klíčové oblastí síťové bezpečnosti. Jednou z možných forem ochrany je využití zařízení DCPro DDoS Protector vyvíjeného sdružením CESNET. Sdružení CESNET provozuje také systémy pro monitorování a analýzu síťového provozu IPFIXcol2 a NEMEA, a dále poskytuje možnost využít protokol pro monitorování sítě sFlow. Cílem této práce je navrhnout a uskutečnit integraci těchto systémů a vytvořit tak efektivní systém potlačení útoků odepření služby. Při vypracování tohoto cíle byl kladen důraz na efektivní využití stávajích řešení, znovupoužitelnost a možnosti budoucího rozšíření celé distribuované architektury.
|
|
|
Design and implementation of a digitally signed report in the Apache JMeter
Procházka, Martin ; Člupek, Vlastimil (referee) ; Šeda, Pavel (advisor)
This thesis focuses on the development of a plugin for Apache JMeter to automatically generate report from the results of performance testing provided by other modules. In the theoretical part, it discusses the capabilities of Apache JMeter, stress testing in general, the structure of PDF document, the theory of digital signature and relevant cryptographic requirements. The practical part deals with the implementation of the report generator. First, it introduces the content of the report, then it discusses the principles of HTML and PDF report generation. Finally, the paper discusses the insertion of a digital signature into a PDF document.
|
|
|
Advanced tool for generating modern Slow DoS attacks
Hrůza, Tomáš ; Člupek, Vlastimil (referee) ; Sikora, Marek (advisor)
In today’s world, cyber threats are becoming increasingly sophisticated. Those threats include SDoS (Slow Denial of Service) and SDDoS (Slow Distributed Denial of Service) attacks, which employ advanced methods to disrupt normal service operations. These attacks are particularly difficult to detect and are effective because they simulate the behavior of legitimate users with slow internet connections. The topic of SDoS attacks is relatively new and not thoroughly documented. To respond to potentially newly devel- oped attacks, it is necessary to understand the principles of currently known attacks and have the practical capability to create them in order to develop effective countermeasures in the future. This thesis focuses on the development of an advanced tool for generating modern SDoS attacks. The main contribution of this work is the enhancement of the generator to create distributed attacks, the creation of an intuitive interface, and more options for monitoring the progress of individual attacks. The theoretical part introduces the topic of internet connection establishment and explains the properties of TCP and IP protocols in detail. It then clarifies the theory of secure communication over the internet using the HTTPS protocol and provides a comparison of currently used web servers. The final theoretical section addresses the topic of denial of service, discussing some types of currently known SDoS attacks, the tools that generate these attacks, and their shortcomings. Next chapter details the implementation of functionalities, which includes performance enhancements of the tool through the use of multiple processes. The developed tool features Slow Read, Slow Next, and Slow Drop attacks, as well as the ability to combine these attacks. This is followed by a description of how a local network of virtual machines was created for the purpose of testing the implemented tool. The final chapter presents the results and effectiveness of the tool in conducting SDDoS attacks against Apache and NGINX web servers in a local network.
|
|
|
Detailed analysis of the cybersecurity of photovoltaic systems
Turek, Adam ; Bohačík, Antonín (referee) ; Mikulášek, Michal (advisor)
Cílem diplomové práce je seznámení se s metodami útoků na fotovoltaické systémy a jejich komponenty. Dále analyzování jednotlivých typů fotovoltaických systémů, jednotlivých komponent a možných bezpečnostních nedostatků. Dále navržení a sestavení testovacího pracoviště umožnující sledování fotovoltaických prvku a síťového provozu s implementovaním několika kybernetických útoků. Práce popisuje teoretickou část fotovoltaických systémů a jejich komponent, kybernetickou bezpečnost a možné útoky. Krom toho také analýzu konkrétních zranitelností na fotovoltaické systémy, která byla provedena prostřednictvím veřejně známých databází jako je Vulners nebo Národní Databáze Zranitelností. Dále popis testovacího prostředí střídačů Solax a Solinteg, implementační nástroje a úspěšně provedenou síťovou, Modbus a kybernetickou analýzu na fotovoltaické střídače s odsimulováním útoků.
|
|
| |
|
|
Cyberattack generator
Gajdušek, Ondřej ; Jeřábek, Jan (referee) ; Hajný, Jan (advisor)
This work deals with the enhancement of software which generates cyberattacks. These enhancements are focused on application layer of ISO/OSI model. The firsh part of the work contains general description of cyberattacks. Concrete attacks which this work is dealing with are described more concretely. Next part deals with describing generator software and its enhancement. The last part is describing testing of newly implemented cyberattacks.
|
|
|
Performance and security testing of network applications
Matej, Michal ; Martinásek, Zdeněk (referee) ; Zeman, Václav (advisor)
The aim of this Master's thesis is to design and to implement the security test in considering a resistance of the device under test to the effects of the distributed denial of service attack DDoS SYN Flood. After processing the test results is developed a protocol about security test of the device under test. In this thesis are tested two devices, namely CISCO ASA5510 firewall and a server with the specified name Server. The theoretical part of the thesis discusses the primary types of network attacks such as reconnaissance, gain access and denial of service attacks. Explained the concept of DoS and its principle, further types of DoS attacks and distributed denial of service attacks DDoS.
|
guest ::
