|
|
Accelerated Detection of Network Security Threats
Piecek, Adam ; Kekely, Lukáš (referee) ; Kučera, Jan (advisor)
This bachelor's thesis deals with the acceleration of IDS (Intrusion Detection System) for detection of security threats in networks. The main goal of the thesis is a proposal to use the Software Defined Monitoring (SDM) concept to accelerate the activity of IDS applications with a regard to their subsequent deployment for high-speed network analysis. The proposed system is implemented and subsequently evaluated for two selected open-source applications - Snort and Suricata. Over and above the task, native support for the SZE2 interface for packet acquisition is also implemented for the Suricata system in order to achieve even faster acceleration using an accelerated network interface card. Two alternatives of the concept are further analysed and compared in the thesis. The first alternative uses the hardware-accelerated version of SDM, while the second alternative is based on full software implementation of the SDM principle. Both alternatives are then evaluated in terms of achieved results and performance parameters of the entire system before and after the acceleration.
|
|
|
Company Security Processes Administration System
Roubal, Petr ; Žaloudek, Jiří (referee) ; Ondrák, Viktor (advisor)
This bachelor`s thesis is concerned with methodology for Company Security Processes Administration System. This methodology will be used like base for Software product. There is description for closely related theme`s. This theme`s are: Change and Chnage Management, Risk and Risk management, Process, Process modelling and Process management. Methodology is described with help of process description.
|
|
|
Monitoring of production accuracy
Jelínek, Adam ; Marek, Tomáš (referee) ; Holub, Michal (advisor)
This master thesis is about implementation of cloud systems for the purpose of monitoring and advancing production accuracy of CNC machine tools within context of Industry 4.0. A demonstration application was created. It is hosted in MindSphere cloud from the Siemens company.
|
|
|
Software-Controlled Network Traffic Monitoring
Kekely, Lukáš ; Antichi, Gianni (referee) ; Lhotka,, Ladislav (referee) ; Kořenek, Jan (advisor)
Tato disertační práce se zabývá návrhem nového způsobu softwarově řízené (definované) hardwarové akcelerace pro moderní vysokorychlostní počítačové sítě. Hlavním cílem práce je formulace obecného, flexibilního a jednoduše použitelného konceptu akcelerace použitelného pro různé bezpečnostní a monitorovací aplikace, který by umožnil jejich reálné nasazení ve 100 Gb/s a rychlejších sítích. Disertační práce začíná rozborem aktuálního stavu poznání v oborech síťového monitorování, bezpečnosti a způsobů akcelerace zpracování vysokorychlostních síťových dat. Na základě tohoto rozboru je formulován a navržen zcela nový koncept s názvem Softwarově definované monitorování (SDM). Klíčová funkcionalita uvedeného konceptu je postavená na hardwarově akcelerované, aplikačně specifické (řízené), na tocích založené, informované redukci a distribuci zachycených síťových dat. Toto je zajištěno spojením vysokorychlostního hardwarového zpracování s flexibilním softwarovým řízením, které tak společně umožňují jednoduchou tvorbu různých komplexních a vysoce výkonných síťových aplikací. Pokročilé optimalizace a vylepšení základního SDM konceptu a jeho vybraných komponent jsou v práci též zkoumány, což vede k návrhu zcela unikátní a obecně použitelné FPGA architektury modulárního analyzátoru hlaviček paketů a vysoce výkonného klasifikátoru paketů založeného na kukaččím hashovaní. Nakonec je vytvořen vysokorychlostní SDM prototyp postavený nad FPGA akcelerační síťovou kartou, který je podrobně ověřen v podmínkách nasazení do reálných sítí. Jsou změřeny a diskutovány dosažitelné zlepšení výkonností v několika vybraných monitorovacích a bezpečnostních případech užití. Vytvořený SDM prototyp je rovněž nasazen v produkčním monitorování reálné páteřní sítě sdružení Cesnet a byl komercializován společností Netcope Technologies.
|
|
|
Monitoring of the Functionality of Running Applications
Paplauski, Andrei ; Ryšavý, Ondřej (referee) ; Čejka, Rudolf (advisor)
The aim of this work is to create a system that will serve to monitor running applications with a focus on the sphere of air traffic control. The thesis analyzes problems of monitoring the application in the given sphere and proposes an effective solution that could be useful for technicians or administrators of different systems. The system consists of clients running on the control stations, collecting certain data and sending them to the server for the next analysis and display. Standard system and process data are collected, such as memory usage, CPU usage, free disk space, etc. In addition, the client can do a screenshot and analyze how the image has changed from the previous state. The created system can be used to monitor different applications running on different computers in a single system.
|
|
|
Detection and Analysis of P2P Network BitTorrent Sync
Kutlák, Martin ; Polčák, Libor (referee) ; Matoušek, Petr (advisor)
Bachelor's thesis is focused on issues with detection of the P2P network BitTorrent Sync in network traffic. In the theoretical part of this work is introduced architecture of the P2P networks, BitTorrent Sync protocol and possible methods for P2P network detection. On the base of this knowledge is designed tool for detection of BitTorrent Sync network traffic. In the practical part of this thesis is presented implementation of the whole monitoring system. In the end of practical part are presented results of conducted tests with monitoring system.
|
|
|
System for website management and monitoring
Polách, Matěj ; Lattenberg, Ivo (referee) ; Koutný, Martin (advisor)
This bachelor thesis implements system of web management and monitoring. The thesis compares and evaluates contemporary possibilities of web monitoring. It likewise describes the application solution and its capabilities. Created system records the managed webpages, monitors their parameters during the time. The system has significant features: Ability to monitor webpages without source code treatment (possibility to monitor competitive webpages as well) and tracking the criteria within the time. The system provides outputs in both text and graphic shapes. It is based on free technologies.
|
|
|
Wireless OBDII-Bluetooth Interface
Bezdíček, Jan ; Šimek, Václav (referee) ; Bartoš, Pavel (advisor)
The goal of this bachelor's thesis was to design an OBDII interface, which would have been able to communicate with a PC through Bluetooth interface. Designed wireless interface is able to diagnose all OBDII equipped vehicles, but the vehicles have to communicate by some of the supported protocols. It is possible to communicate with a vehicle using a software application or by simple commands in data terminal as well. Main parts of the device are a proprietary ELM327 microcontroller and an industrial Bluetooth module. The built-up device has been tested and it is able to display right values of vehicle sensors and to operate diagnostic trouble codes as well.
|
|
|
Search for People in Recordings from Security Cameras
Jezerský, Matouš ; Hradiš, Michal (referee) ; Smrž, Pavel (advisor)
This thesis deals with the design and implementation of a system, which allows to search for and recognize people in video recordings. The presented design is based on a preceding research in theory relating to the topics of face and people recognition. Furthermore, the system design is implemented using convolutional neural networks for face recognition, while the implementation primarily utilizes the libraries dlib and OpenFace. The design and implementation use parallelization and distribution of tasks among multiple devices to reduce computation time, while also bearing in mind the practical applications of such system, such as working with limited amounts of available information regarding the person we seek. The precision of people detection and recognition of the implemented system is about 70% to 80%, based on the performed task. Among other uses, the system can be utilized to find a particular person in a video recording, to estimate the number of passes through the monitored space of one person, or the number of passes in total, or to find unknown people in the monitored space.
|
|
|
Universal linux server for small and medium companies enabling simple network control
Juřena, Stanislav ; Pust, Radim (referee) ; Burda, Karel (advisor)
The main object of this thesis was to design a computer network for small and medium companies which will be made among others from network server providing simple network control. The next task was to provide internet connection to subscribers of local area network, their security and access to common services. There had been discussed the choice of distribution of Linux operation system with regarding to demanded services, stability and long lasting operation in theoretical part. One part of the work is a theoretic preliminary to separate services, to the purpose of their using and to their weaknesses. The practical part deals with an installation and configuration of Debian operating system, launching the base services and the setting of selected monitoring programs.
|
guest ::
