|
|
Detection of Dynamic Network Applications
Oroš, Petr ; Kaštil, Jan (referee) ; Tobola, Jiří (advisor)
This work deals with the detection of dynamic network applications. It describes a general method for detection of any application layer protocol and automatically searches for the detection rules. The practical part deals with general detection protocol to the automatically generated designs. A special section is devoted detect bittorrent protocol.
|
|
|
Detection of Dynamic Network Applications
Burián, Pavel ; Drahošová, Michaela (referee) ; Kaštil, Jan (advisor)
This thesis deals with detection of dynamic network applications. It describes some of the existing protocols and methods of their identification from IP flow and packet contents. It constitues a design of a detection system based on the automatic creation of regular expressions and describes its implementation. It presents the created regular expressions for BitTorrent and eDonkey protocol. It compares their quality with the solution of L7-filter.
|
|
|
Implementation of advanced filters based on packet classification using Linux
Malár, Lukáš ; Holešinský, Pavel (referee) ; Matocha, Tomáš (advisor)
The Master’s thesis ”The Implementation of the Advanced Filtering Based on the Packets’ Classification using Linux” is intended to the realization of an internet gateway. The gateway serves to make the connection between local network and the internet. The thesis contains a short theoretic description of parameters and types of QoS services. The classful and classless queues are mentioned in detail. The last theoretic part refers to the introducing of LDAP protocol and its usage. The practical part of this thesis captures the configuration of firewall, dns and radius server connected with LDAP databases. The thesis also contains detailed description of the production QoS by HTB with L7-filter including the compilation of system’s core. The end of the thesis contains the series of tests of created scripts.
|
|
|
Reducing Peer-to-Peer Network Traffic
Šípoš, Martin ; Tobola, Jiří (referee) ; Žádník, Martin (advisor)
Bachelor thesis deals with peer-to-peer detection watching and reducing bandwith. An application was created for this purpose that is able to detect watch and control such networks at application layer or to block specified ports using opensource utilities. The application was created in Java language and is dedicated to Linux operating system.
|
|
|
Detection of P2P Networks
Vrba, Jindřich ; Kaštil, Jan (referee) ; Tobola, Jiří (advisor)
This thesis deals with peer-to-peer network detection. It describes possible techniques of identification on various ISO/OSI Layers. The goal of the practical part is to examine detection on the L7 layer by means of string patterns. A presentation of the results with graphs on web pages is also included. The application is intended for the GNU/Linux operating system.
|
|
|
Construction of Nondeterministic Finite Automata
Stanek, Timotej ; Šimek, Václav (referee) ; Kaštil, Jan (advisor)
This thesis discuss about dilemma in construction of nondeterministic finite automata from PCRE expressions with respect of their parameters with use in Intrusion Detection Systems. There is showed PCRE expressions syntax too. We discussed two different approaches to construct nondeterministic finite automata from PCRE expressions. The implementation of these two algorithms is described. We constructed finite automata with them from expressions of three Intrusion Detection Systems: SNORT, Bro IDS and L7-Filter, and finally we compared their parameters and deduced conclusions.
|
|
|
Detection of P2P Networks
Březina, Matej ; Matoušek, Petr (referee) ; Tobola, Jiří (advisor)
This document deals with design, implementation and testing of software system for detecting p2p (peer-to-peer) networks based on combination of BPF prefiltering and POSIX regular expressions packet payload matching with known p2p protocol communications. The proposed detection system includes a database with some rules of most effuse p2p protocols in format resembling to definitions for L7-filter classifier. The application is implemented in C, runs in userspace and is targeted to all POSIX compatible platforms. The combination of detector with user attached QoS controlling is complete solution for traffic reduction of common p2p protocols.
|
|
|
Advanced filtering operation in the Linux operating system
Janura, Dominik ; Pelka, Tomáš (referee) ; Szőcs, Juraj (advisor)
This thesis is oriented on the subject of advanced filtering operations and network security under Linux operating system. It explains the procedure of creating a simple packet filtering firewall using the netfilter framework and verifies its efectivity. It further examines the options of user identification in peer-to-peer networks using L7-filtering. It contains design of a system that detects traffic in the most used P2P networks. This system’s function is attested by simulating a P2P traffic inside the local network.
|
|
|
Reducing Peer-to-Peer Network Traffic
Šípoš, Martin ; Tobola, Jiří (referee) ; Žádník, Martin (advisor)
Bachelor thesis deals with peer-to-peer detection watching and reducing bandwith. An application was created for this purpose that is able to detect watch and control such networks at application layer or to block specified ports using opensource utilities. The application was created in Java language and is dedicated to Linux operating system.
|
|
|
P2P Networks Blocking
Švajda, Patrik ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This bachelor's thesis deals with filtering P2P networks intend for changing data. My work describes layers of ISO/OSI model, which is able to blocking these networks. For Linux describes tools of detecting P2P networks with the aid of data part of packet. Testing proves success of blocking by L7- filter and IPP2P filter.
|
guest ::
