|
|
Network Traffic Visualization
Matoušek, Martin ; Bartoš, Václav (referee) ; Kováčik, Michal (advisor)
Bachelor thesis deals with visualization of network traffic by NetFlow data. In the theoretical part describes NetFlow technology thet is used for monitoring of computer network . Then I introduce theory of graph layouts . Purpose of the thesis is to crate tool for visualization data.
|
|
|
Protecting Local Network Using NetFlow
Hanousek, Vít ; Polčák, Libor (referee) ; Matoušek, Petr (advisor)
This bachelor's thesis deals with the use of NetFlow data for monitoring local networks. There is an analysis of the best known threads for a local network in the first part of the thesis. Detection algorithms based on signature NetFlow detection were implemented for the chosen threads. Four plugins for an open-source application NfSen are outputs of this thesis. These plugins detects the following threads: vertical and horizontal scans, dictionary based attacks on SSH protocol, spam machines.
|
|
|
Web Interface for Network Anomaly Detection System
Sládek, Petr ; Kováčik, Michal (referee) ; Bartoš, Václav (advisor)
The goal of this work is to create a web interface for network anomaly detection system called HostStats. Its mission is to enable users to effectively work with data and statistics provided by the system. Web interface works as a plugin to NfSen as a completely independent web applications. Implementation took place in PHP using the Nette Framework, HTML5, CSS3, and JavaScript using the jQuery library.
|
|
|
VoIP Quality Analyzer
Krajíček, Michal ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This thesis deals with the quality of the IP telephony and its measuring using the netflow technology. It describes individual factors influencing the quality from sampling and quantization over the impairment caused by codecs to the degradation during network transfers. Next part focuses on models allowing to regard quality of IP telephony with emphasis to the E-model and R-factor. It shortly describes the netflow technology and the quality measuring connected with it. Practical part describes the principle of how the quality is measured by the netflow probe nProbe together with offer and implementation of application measuring the quality. The comparison with commercial application is presented and the results are discussed.
|
|
|
Detecting P2P Networks Using NetFlow
Starigazda, Michal ; Čejka, Rudolf (referee) ; Matoušek, Petr (advisor)
This thesis addresses the problem of identifying P2P networks within NetFlow traces. There are presented different methods for identifying P2P networks. Their advantages and disadvantages are discussed in compare to a method using NetFlow technology. This method is based on traffic characteristics and behaviour of specific application. The theoretical section presents characteristic features of P2P systems in general. A system based on these and more application-specific features is proposed to detect selected P2P application -- BitTorrent. Finally, a NfSen plugin for detecting BitTorrent protocol within network traffic (using NFDUMP tools) is implemented. Detection targets users of BitTorrent protocol using NetFlow traces without inspecting the payload of the packets.
|
|
|
Network Attacks Detection Using Statistical Models with Netflow Data
Čegan, Jakub ; Košař, Vlastimil (referee) ; Novotňák, Jiří (advisor)
This diploma thesis describes several selected network attacks detection method using statistical models with NetFlow data. First are described several well known and threats for computer networks, which are easily detectable in the NetFlow data. Thesis also introduce and present the NetFlow technology including its protocol and architecture. The theoretical part of the thesis describes statistical methods with focus on the ASTUTE method, that can be used for an anomaly detection. Following part introduces tools used for method implementation as the NfSen plugins. Last parts of the thesis describe in detail implementation of the plugins and following plugins testing which included simulated network attacks.
|
|
|
Network Protection Using NetFlow Data
Hlavatý, Ivo ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This document focuses on Cisco Netflow technology and its possible usage in monitoring networks and detecting network anomalies. Based on the analysis of attacks at the network and transport layer is designed an application for selected security threats which detects its presence. The implementation section provides a system for predicting network traffic and related detecting deviations from the baseline on the basis of statistical data. Use of NetFlow technolgy is demonstrated on examples where the results of other current security and monitoring techniques have failed or did not provide sufficiently good results.
|
|
|
Network Protection Using NetFlow Data
Dokoupil, Tomáš ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This thesis deals with computer network security using NetFlow technology for network protection. Ways and means of administration and protection of network are described preliminary. Next analysis of security threats and their detection possibilities using NetFlow data is made. Applied part consists of NfSen threat detect plugins implemetation and detection rules designing for them as well. This plugins were tested for attack simulation even real VUT network data.
|
|
|
VoIP Quality Analyzer
Krajíček, Michal ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This thesis deals with the quality of the IP telephony and its measuring using the netflow technology. It describes individual factors influencing the quality from sampling and quantization over the impairment caused by codecs to the degradation during network transfers. Next part focuses on models allowing to regard quality of IP telephony with emphasis to the E-model and R-factor. It shortly describes the netflow technology and the quality measuring connected with it. Practical part describes the principle of how the quality is measured by the netflow probe nProbe together with offer and implementation of application measuring the quality. The comparison with commercial application is presented and the results are discussed.
|
|
|
Web Interface for Network Anomaly Detection System
Sládek, Petr ; Kováčik, Michal (referee) ; Bartoš, Václav (advisor)
The goal of this work is to create a web interface for network anomaly detection system called HostStats. Its mission is to enable users to effectively work with data and statistics provided by the system. Web interface works as a plugin to NfSen as a completely independent web applications. Implementation took place in PHP using the Nette Framework, HTML5, CSS3, and JavaScript using the jQuery library.
|
guest ::
