|
|
Design of small-size data networks with advanced services
Vaněk, Jiří ; Kubánková, Anna (referee) ; Novotný, Vít (advisor)
The main objective of this thesis is to get acquainted with the field of designing professional data networks and with typical network service required at these networks. A basic description of network hierarchy and of network elements is part of this thesis. At the same time, individual network services and their usage are defined. At the latter part of the thesis there is a suggestion of design creation steps and of service implementation. Further on, the thesis describes a real design of a laboratory task and it’s practical implementation. Detailed guidelines how to complete a laboratory task are part of this thesis.
|
|
|
Secure Transport of NetFlow and IPFIX Records
Štěpánek, Adam ; Grégr, Matěj (referee) ; Podermański, Tomáš (advisor)
This bachelor thesis deals with an IP flow based data network monitoring system. It presents the architecture of the NetFlow based monitoring, explains the basic terms, the NetFlow protocol and its alternatives. Further, weak spots of the monitoring systems are determined and a conceptual solution is proposed. This solution is implemented and described in detail. Finally, testing methods and results are discussed and the possibilities of further development and optimization are proposed.
|
|
|
Profiling of Network Traffic for DDoS Mitigation
Ligocká, Alexandra ; Tisovčík, Peter (referee) ; Žádník, Martin (advisor)
The aim of this work is to propose metrics for \gls{ddos} attacks detection and setting the thresholds of normal network traffic in a given computer network at different levels of detail. Based on the selected metrics and network flow data, a network profile is extracted and afterwards stored in memory. Within the implementation part, this work deals with the implementation of program for the collection and calculation of specified metrics, their processing, storage and provides a simple interface providing access to stored data.
|
|
|
Xtend Monitoring and Analysis Tool
Kocman, Tomáš ; Veselý, Vladimír (referee) ; Ščuglík, František (advisor)
This thesis is focused on the monitoring and analysis of data transfer between applications on the network and creating custom monitoring tool that would meet the requirements of the application server Xtend of company Xura, Inc. The introductory chapters describe theoretical background of data capture and analysis, and application server Xtend with the services it provides. The thesis is mainly focused on the implementation of a system that cooperates with the server Xtend and its output can be further processed and interpreted.
|
|
|
Anomaly Detection Based on SNMP Communication
Štěpán, Daniel ; Drga, Jozef (referee) ; Očenášek, Pavel (advisor)
The aim of this thesis was to develop a practically applicable set of methods for classification and detection of anomalies in computer network environments. I have created extensions to the network monitoring system in the form of two modules for an open source network monitoring tool based on machine learning. The created modules can learn the characteristics of normal network traffic. The first module, based on the algorithm Random Forest Classifier, detects and is able to classify several known denial-of-service attacks. The second module, based on the algorithm Local Outlier Factor, detects anomalous levels of network traffic. Attacks that the first module is able to classify are the following: TCP SYN flood, UDP flood and ICMP flood. Moreover, it was trained to detect the SSH Bruteforce attacks and the slow and fragmented Slowloris attack. While working on this thesis, I tested the device using the methods mentioned above. The experiments showed that the classification-based module is able to detect known attacks, except for the Slowloris attack, whose characteristics are not very different from normal traffic. The second module sucessfully detects higher levels of network traffic, but does not perform the classification.
|
|
|
Monitoring of services within active network elements by Mikrotik
Kamenář, Filip ; Slavíček, Karel (referee) ; Grenar, David (advisor)
This bachelor thesis deals with the monitoring of the VPN services on the networking elements Mikrotik. The theoretical part includes the description of RouterOS system, management options and networking devices used. The thesis consists of the description of the VPN services and analysis of PPTP, SSTP, L2TP and OpenVPN protocols, which are implemented in the practical part of this work. The theory also contains the description of monitoring devices included in the RouterOS system. In comparison, external tools are enlisted. Chosen monitoring tools are therefore implemented in the practical part of the thesis and in the monitoring script. The practical part of the bachelor thesis is focused on the establishment of VPN tunnels and its parameter measurement. The VPN clients are to be found in the Czech Republic, Ukraine and Egypt, which establishes the real conditions for network monitoring status. The final part of the work deals with the script, which is created for the automatic-monitoring of VPN service in the accessible network and sends the gathered data to the operators. The aim of the thesis is to illustrate the usage of integrated monitoring tools in the RouterOS system in the network built on the Mikrotik elements. The chosen monitoring service was the service VPN, which is being used for remote access to the local networks from distant part of the world by the corporations but also individuals. Individual monitored parameters are enlisted and compared depending on client geographic location.
|
|
|
Utilization of open source tools for access network monitoring
Gmitter, Jakub ; Sládok, Ondřej (referee) ; Grenar, David (advisor)
The bachelor thesis deals with the issue of access network monitoring, which is necessary to ensure the stability of access networks. It contains a comparison of suitable monitoring tools for their selection. The work is focused on creating scripts in the Bash language, which analyze data on the access network and implement outputs from selected monitoring tools. In this work were analyzed the transmitted packets and the achieved transmission speeds during monitoring. The final output of this work are databases created in MySQL, which contains data about the analyzed parameters and visualization of data analysis using the Grafana program. Graphs of the transmission speeds of monitoring and basic transmission statistics were created on panels during visualization.
|
|
|
Network Monitor for Gnome
Hrozek, Jakub ; Smrčka, Aleš (referee) ; Vojnar, Tomáš (advisor)
The thesis presents a new network monitoring application for the Linux operating system. It is the first graphical application with such functionality which monitors wide range of network traffic aspects and operates in graphical environment. It is integrated into the GNOME desktop environment and is also integrated into Fedora Linux distribution. The thesis discusses similar existing tools, the key part of the thesis is design, implementation and testing of the application.
|
|
|
IP Flow Filtration and Profiling
Sedlák, Michal ; Tisovčík, Peter (referee) ; Kučera, Jan (advisor)
This thesis addresses the problem of filtering and profiling IP flows, primarily data of IPFIXsystems. Within the work, a general filtering component is designed and implemented, whichaims to be sufficiently efficient and flexible for use in other projects related to IP flows. Thiscomponent is then adapted to work with data in the IPFIX protocol format and integratedinto the existing modular collector IPFIXcol2 in the form of plugins adding the support forfiltering of passing IPFIX data and their sorting into profiles.
|
|
|
Network and Application Response Time Monitoring
Sagál, Peter ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This bachelor's thesis deals with analysis of requirements, design and implementation of application for monitoring of network, network components and application's response time, network components and applications. Document will introduce two basic methods of monitoring and analysis of network responses - passive and active monitorng, which is the basis of suggested application that provides a web interface for management and presentation of monitoring results.
|
guest ::
