|
|
Packet Filtering in Computer Networks
Holuša, Jan ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor's thesis deals with packet classification in computer networks. It describes algorithms which are implemented in experimental Netbench framework. For some of them, there are examples of data structures and searching methods. Part of this thesis is implementation of modular packet classification algorithm. Another part of this thesis describes experiments with this algorithm to find its suitable parameters and experiments with Netbench algorithms for comparison of their space and computational complexity.
|
|
|
Network Traffic Analysis Using NIFIC Device
Melo, Juraj ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
This bachelor's thesis describes examples of using NIFIC device in order to suppress security risks in computer networks. NIFIC is a stateless packet filter with hardware acceleration, suitable for deploying on high-speed networks. This thesis contains examples, presenting usage of this device which can improve network security, in cooperation with other security systems. Some examples are extended with description of another useful features, which provide higher effectivity of network managing and monitoring.
|
|
|
Packet Filtering in Computer Networks
Šrůtka, Petr ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor thesis contains an introduction to packet classification, types of packet classification techniques and different metrics. It describes different algorithms used for packet classification and implementation of Recursive flow classification algorithm is also part of this bachelors thesis. It presents different configuration parameters of RFC algorithm and describes its advantages and disadvantages. This work is concluded with a set of experiments describing characteristics of implemented algorithm together with comparison of other classification approaches.
|
|
|
Packet Classification Algorithms
Myška, Michal ; Kajan, Michal (referee) ; Puš, Viktor (advisor)
This bachelor's thesis deals with packet classification in computer networks. The theory describing a computer network and approach to the classification is explained in the introduction. Then, classification algorithm based on making decision tree is chosen. An important feature of this algorithm is the possibility of parameterization. The work analyzes the influence of various parameters on the creation of a decision tree. Selected classification algorithm is also compared with other classification algorithms from experimental library Netbench.
|
|
|
Stateful Firewall for FPGA
Žižka, Martin ; Kajan, Michal (referee) ; Puš, Viktor (advisor)
This thesis describes the requirements analysis, design and implementation of stateful packet filtering to an existing stateless firewall. They also deals with testing of the implemented system. The first two chapters describe the properties NetCOPE development platform for FPGA. They also describes the principle of operation firewall, which also serves as a requirements specification for stateful firewall. Then describes the detailed design of individual modules to modify the existing firewall and the proposal for the creation of new modules. It also discusses the implementation of the proposed modules and testing for proper operation. Finally, it discuss the current state of the thesis and describes possible future expansion.
|
|
|
Probabilistic Packet Classification Acceleration on FPGA
Kurka, Denis ; Matoušek, Jiří (referee) ; Kekely, Lukáš (advisor)
Klasifikace síťových paketů je klíčovým úkolem v síťových systémech, protože umožňuje efektivní směrování a filtrování dat. Pravděpodobnostní filtry jsou klasifikační metoda, která používá různé techniky k aproximaci členství paketu v sadě pravidel. Tato práce zkoumá tři algoritmy: Bloomův filtr, cuckoo filtr a xor filtr. Hlavním cílem je porovnat výkon těchto tří metod při implementaci jako hardwarové komponenty v FPGA systémech. Kritéria hodnocení zahrnují chybovost, maximální frekvenci a využití zdrojů FPGA se zameřením na paměť. Výsledky ukazují, že xor filtr překonává ostatní v oblasti chybovosti, ve všech kategoriích. Bloomův filtr je nejrychlejší volbou pro menší a rychlejší komponenty, kde je vyšší chybovost tolerovatelná. Cuckoo filtr je nejefektivnější z hlediska využití FPGA logiky. Tyto poznatky přispívají k vývoji optimalizovaných klasifikačních systémů a poskytují cenné informace o možnostech implementace pravděpodobnostních filtrů v hardwarových architekturách.
|
|
|
Packet Classification Algorithms
Myška, Michal ; Kajan, Michal (referee) ; Puš, Viktor (advisor)
This bachelor's thesis deals with packet classification in computer networks. The theory describing a computer network and approach to the classification is explained in the introduction. Then, classification algorithm based on making decision tree is chosen. An important feature of this algorithm is the possibility of parameterization. The work analyzes the influence of various parameters on the creation of a decision tree. Selected classification algorithm is also compared with other classification algorithms from experimental library Netbench.
|
|
|
Packet Filtering in Computer Networks
Šrůtka, Petr ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor thesis contains an introduction to packet classification, types of packet classification techniques and different metrics. It describes different algorithms used for packet classification and implementation of Recursive flow classification algorithm is also part of this bachelors thesis. It presents different configuration parameters of RFC algorithm and describes its advantages and disadvantages. This work is concluded with a set of experiments describing characteristics of implemented algorithm together with comparison of other classification approaches.
|
|
|
Stateful Firewall for FPGA
Žižka, Martin ; Kajan, Michal (referee) ; Puš, Viktor (advisor)
This thesis describes the requirements analysis, design and implementation of stateful packet filtering to an existing stateless firewall. They also deals with testing of the implemented system. The first two chapters describe the properties NetCOPE development platform for FPGA. They also describes the principle of operation firewall, which also serves as a requirements specification for stateful firewall. Then describes the detailed design of individual modules to modify the existing firewall and the proposal for the creation of new modules. It also discusses the implementation of the proposed modules and testing for proper operation. Finally, it discuss the current state of the thesis and describes possible future expansion.
|
|
|
Packet Filtering in Computer Networks
Holuša, Jan ; Kováčik, Michal (referee) ; Kajan, Michal (advisor)
This bachelor's thesis deals with packet classification in computer networks. It describes algorithms which are implemented in experimental Netbench framework. For some of them, there are examples of data structures and searching methods. Part of this thesis is implementation of modular packet classification algorithm. Another part of this thesis describes experiments with this algorithm to find its suitable parameters and experiments with Netbench algorithms for comparison of their space and computational complexity.
|
guest ::
