|
|
Detection and mitigation of cyber attacks at local area networks
Racka, Jan ; Lieskovan, Tomáš (referee) ; Gerlich, Tomáš (advisor)
The bachelor thesis is focused on the detection and mitigation of flood attacks in local area networks. The thesis can be divided into two parts. In the theoretical part, first flooding attacks are described. Then, the problem of attack detection is discussed in depth, including the implemented detection methods. Subsequently, the classification of detection tools by location is discussed and examples of detection tools are given. The last theoretical section is devoted to network mapping methods and topology detection tools. In the practical part, the design of the IDS and the test network is discussed. The network consists of three end devices namely: the IDS, the victim and the attacker. A Mikrotik router is used to ensure connectivity between all the devices. The IDS has been implemented in Python and is composed of individual modules that extend its functionality. The most important module is the detection module, which contains detection methods against SYN Flood, UDP Flood, ICMP Flood attacks and one universal comprehensive method against all flood attacks. The ARP Scan module allowed the IDS to map the network and use ARP queries to detect the presence of endpoint devices in the network. The learning module made it easier to set up rules for each detection method by monitoring network traffic over a period of time. It then determines appropriate rule values from the detected data. The SSH module provided IDS with the ability to proactively respond to attacks and disconnect the attacker from the rest of the network. ARP Scans also use the SSH module to discover information about guests. The IDS has been tested in both virtual and real environments. The results show that the developed detection methods work and the IDS can stop the attack in a reasonable time. ARP Scanning was also tested and was able to detect new guests on average in the first pass. The effect of IDS on communication was also monitored and found to be minimal.
|
|
|
Porovnání reprodukčních biotechnik využitelných v chovu skotu a faremním chovu jelenů
Kaiserová, Veronika
The bachelor thesis “Comparison of reproductive biotechnology in cattle breeding and deer farms” deals with comparison of biotechnologies used in cattle breeding and deer farms. In the last few years, there has been a growing interest in biotechnology on deer farms and therefore, this work focuses on artificial insemination and embryo transfer. There is a detailed description of methods of heat detection and its synchronization, dia-gnostics of pregnancy, methods of insemination, embryo transfer. In first part there is basic information about female sex organs of the breeding female and hind. Methods of heat detection and their potential use are described as well. The second part is dedicated to insemination, and there are methods which can be used only for one category or both. The third part is devoted to embryo transfer, which is highly developed also in deer. There is a comparison of synchronization protocols for cattle and a comparison of methods of embryo transfer in hind.
|
|
|
Project of communication network infrastructure for office building
Kajan, Tomáš ; Sedlák, Petr (referee) ; Novotný, Vít (advisor)
The bachelor's thesis deals with the design of a communication infrastructure of a multi-story office building. The work deals with a design of a metallic horizontal wires, as well as optical vertical wires between the floors of the building. One of the main factors, which the proposal was based on, was the possibility of renting the building to several tenants. As a part of the project is also partially designed wireless network and the whole work is concluded by an economic evaluation, witch contains active elements, passive elements and approximate price of passive elements installation.
|
|
| |
|
|
SDN in LAN networks
Kříž, Daniel ; Hošek, Jiří (referee) ; Slavíček, Karel (advisor)
This bachelor's thesis is devoted to the problem of Software Defined Networks. It describes the concept of SDN, the OpenFlow protocol, which is an integral part of this issue, and lastly is mentioned the concept of NFV. The goal is to research this issue, gather information about the available open source controllers and choose the most suitable ones. Furthermore, a proposal for the implementation of the laboratory task and a~list of available components have to be created. The final task is to construct and test laboratory task and then with help of this knowledge create laboratory manual.
|
|
|
Power over Ethernet implementation
Šturala, Martin ; Musil, Petr (referee) ; Krajsa, Ondřej (advisor)
The aim of this bachelor thesis is to design and implement a power supply module for an end station network device with an optional 5 V or 3.3 V output, which supports power over ethernet technology, both for active and passive method of this technology. The work is focused on the design of a hardware solution to this problem. A Texas Instruments TPS2373 chip supporting the latest technology according to the IEEE802.3bt specification was chosen to implement active POE. The LM317 linear stabilizer was chosen to implement the passive POE.
|
|
|
Detection of local area network topology
Šípek, Martin ; Gerlich, Tomáš (referee) ; Martinásek, Zdeněk (advisor)
The bachelor thesis focuses on the detection and mitigation of Man-in-the-Middle attacks in the local network using its own implementation in the Python programming language. One of the most common Man-in-the-Middle attacks is ARP spoofing, which should be identified by the detection system and then mitigate it. The theoretical part of the thesis analyzes the current state of the issue, including a detailed description of the network analysis and tools which are used in this analysis. Cyber attacks are also described, namely Man-in-the-Middle and Denial-of-Service attacks. The practical part describes the realization of the experimental workplace and its detailed components and the installation and configuration of MySQL and Elasticsearch databases. It also focuses on the Suricata program, designed to analyze network traffic, on the actual implementation of Man-in-the-Middle attack detection and on the achieved results of testing of the implemented detection system.
|
|
|
LAN Security Monitoring
Grégr, Matěj ; Trchalík, Roman (referee) ; Očenášek, Pavel (advisor)
This bachelor thesis deals with security in LAN networks and monitoring security and availability of selected ports. The thesis gives a brief overview of the LAN attacks, defense techniques that are used to prevent them and port scanning techniques. In the practical part of my thesis I have implemented the set of functions collected in library. These functions are ready to be used for testing of ports availability and analysis of open services. The implementation is realized in C language, Libnet and Pcap libraries and bash scipts and the web control panel is implemented in HTML and PHP.
|
|
|
Implementation of USB/LAN/WIFI interface
Voneš, Jaroslav ; Roubal, Zdeněk (referee) ; Steinbauer, Miloslav (advisor)
This bachelor thesis goes into implementing the most modern communication interfaces USB/LAN/WIFI to control the computer itself and also the incubator via a Web interface. The term describes the overall solution to the management of the incubator for using microcontroller ATmega8 with the possibility of the exchange of communication interfaces. For the USB converter was used the circuit FTDI FT232 BM company, from LANTRONIX Ethernet was used for Converter converter XPORT and eventually to communicate the WIFI was elected circuit ESP 8266
|
|
| |
guest ::
