|
Methodology of securing API interfaces
Kuruc, Tomáš ; Zápotočný, Matej (referee) ; Sedlák, Petr (advisor)
This work focuses on analyzing, identifying, and addressing security aspects associated with Application Programming Interfaces (APIs). In today's digital environment, where APIs serve as a critical link between applications and systems, safeguarding their security becomes a critical priority. The aim of this work is to provide a holistic overview of existing security threats, security methods for APIs, and the design of a methodology that effectively enhances their resilience against cyber attacks. The work encompasses thorough literature analysis, vulnerability identification, evaluation of existing security methods, and the development of a structured methodology aimed at securing APIs across a wide spectrum of environments and applications.
|
|
Detailed analysis of the cybersecurity of photovoltaic systems
Turek, Adam ; Bohačík, Antonín (referee) ; Mikulášek, Michal (advisor)
Cílem diplomové práce je seznámení se s metodami útoků na fotovoltaické systémy a jejich komponenty. Dále analyzování jednotlivých typů fotovoltaických systémů, jednotlivých komponent a možných bezpečnostních nedostatků. Dále navržení a sestavení testovacího pracoviště umožnující sledování fotovoltaických prvku a síťového provozu s implementovaním několika kybernetických útoků. Práce popisuje teoretickou část fotovoltaických systémů a jejich komponent, kybernetickou bezpečnost a možné útoky. Krom toho také analýzu konkrétních zranitelností na fotovoltaické systémy, která byla provedena prostřednictvím veřejně známých databází jako je Vulners nebo Národní Databáze Zranitelností. Dále popis testovacího prostředí střídačů Solax a Solinteg, implementační nástroje a úspěšně provedenou síťovou, Modbus a kybernetickou analýzu na fotovoltaické střídače s odsimulováním útoků.
|
|
Security Testing Tool for Industrial Devices
Pospíšil, Martin ; Člupek, Vlastimil (referee) ; Fujdiak, Radek (advisor)
The master thesis is focused on the issue of security of industrial devices in information networks. The theoretical part first describes the convergence of operational and information technologies. It then focuses on the industrial protocols Modbus TCP and OPC UA, security models, and an analysis of the current state of security testing. The practical part of the master thesis details the design and implementation of the developed tester and the methodology created for testing purposes. In conclusion, experimental testing of two industrial devices with the above communication protocols is conducted.
|
|
Detection of attacks on the L2 layer
Štefánik, Jaromír ; Martinásek, Zdeněk (referee) ; Gerlich, Tomáš (advisor)
Bachelor thesis is focused on cybernetic attacks on the second layer of the reference model OSI, namely: DHCP starvation, MAC flooding, Eavesdropping. The first, theoretical, part of the bachelor thesis is focused on the OSI model, types of cybernetic attacks and methods used by cybercriminals (attackers). In the practical part of the bachelor thesis an experimental workplace was set up (local network), the cybernetic attacks were realized, detection algorithms for given attacks were theoretically designed and programs designed to detect the given attacks were created.
|
|
Modern cyber attacks
Hodes, Vojtěch ; Hajný, Jan (referee) ; Malina, Lukáš (advisor)
This bachelor's thesis deals with contemporary cyber attacks with an emphasis on denial of service attacks. In the theoretical part the thesis focuses on an analysis and description of the cyber attacks. It monitors trends in cyber attacks and also describes generators of denial of service attacks based on software and hardware platform. The practical part uses the information from the theoretical one to design tests of network devices against cyber attacks, their practical realization and a comparison between used cyber attacks. At the very end the thesis offers possible countermeasures against them.
|
|
Cyber attacks on operating systems
Holasová, Eva ; Komosný, Dan (referee) ; Člupek, Vlastimil (advisor)
This bachelor thesis is focused on cybernetic attacks towards operating systems. In the thesis, there are discussed base security functions of operating systems Windows, Linux and macOS; followed by described cybernetic attacks and its differences. The chapter Malware describes the most harmful software. Next chapter is about common awareness of cybernetic attacks, in which terms antivirus, firewall and IDS/IPS (Intrusion Detection System/Intrusion Prevention System) systems are defined. Following chapter brings scenario of ethics of hacking on operating system of personal computer, server and web server by using penetration tests. The thesis is finished by doing ethics hacking and evaluations. The goal of this thesis is to summarize the problem of cybernetic attacks, methods and tools whose goal is to break the security of the system, the use some of these method to do ethics hacking in virtualized environment.
|
|
Tool to support DoS testing
Kamenář, Filip ; Gerlich, Tomáš (referee) ; Martinásek, Zdeněk (advisor)
The master thesis deals with denial of service attacks and their implementation in own application, called ptdos, that allows testing of web applications using the implemented attacks. Ptdos is also capable of monitoring the progress of testing as well as its evaluation. In the theoretical part of the thesis, the basic concepts are defined, the classification of attacks into categories is described and the individual attacks are discussed in detail in order to explain how the denial of service should occur in the context of an attack. The practical part of the thesis describes the design of the ptdos application architecture and its subsequent development, including a description of the implementation of all the selected attacks. The last part of the thesis is the testing of the application, which includes the creation of a test network and the analysis of all implemented attacks using different scenarios.
|
|
Cyberattack Generator
Gregr, Filip ; Smékal, David (referee) ; Hajný, Jan (advisor)
This thesis is focused on developing a tool that is capable of generating cyber attacks. In the opening there are introduced some attacks using the ISO/OSI application layer protocols. Specifically, these are attacks known as Slowloris, RUDY, Slow Read, HTTP flood, and dictionary attack on the SSH. These attacks are implemented into an existing DoSgen Linux tool that already contains several famous network attacks. The main part of the thesis is devoted to the description of the tool and to the implementation of its own extension. The created tool is practically tested in an experimental enviroment against the Apache web server. Part of the thesis is the documentation for the improved DoSgen tool.
|
|
Application of deep learning techniques for anomaly detection in computer networks using graphical representation of network traffic
Židovský, Patrik ; Mikulec, Marek (referee) ; Safonov, Yehor (advisor)
This thesis deals with the application of deep learning techniques for anomaly detection in computer networks. By selecting appropriate features of the communication network, a graphical representation of the network traffic has been created in order to train convolutional neural networks. The first trained model was used in a Raspberry Pi device with a Neural Compute Stick hardware accelerator. The second model was placed in a central location for additional control of the results. The aim of this work was to design and implement an automated anomaly detection system to be tested by three selected cyber attacks. Evaluate the results obtained and propose optimization options.
|
|
Krádež virtuální identity
NEVLUDOVÁ, Lucie
The bachelor thesis is focused on virtual identity theft. In the theoretical part of this thesis are explained terms related to the identity of the person. In addition, some cyber attacks related to identity theft are selected and described. Information regarding the legal perspective on this topic is also mentioned. The practical part of the thesis contains a methodology for preventing theft of virtual identity, the methodology is based on a social experiment. The methodology is confronted with a person whose virtual identity was previously stolen.
|