|
|
Information Fusion for Classification of Network Devices
Sedláček, Ondřej ; Tisovčík, Peter (referee) ; Žádník, Martin (advisor)
This work is focused on solving information fusion when dealing with multiple data sources in computer network monitoring. A solution built on the concept of classification rules configured by experts is presented. Configuration is simplified using a designated configuration language interpreted by the solution. The classification rules enable coverage of diverse types of data. The result is given as a label from specified taxonomy. Using a taxonomy maintains the different levels of detail between the data sources, even in the output label. The solution also uses the Dempster-Schafer theory for merging labels from different sources into a single output label. Results of experiments show that information fusion in this context does increase the accuracy of device classification. A process of rule optimization was developed based on testing and experiments with a dataset from a real network. The accuracy was increased by 19 % compared to the original solution using this process.
|
|
|
Network design support
Zemánek, Martin ; Fojtová, Lucie (referee) ; Pelka, Tomáš (advisor)
The work is focused on support of computer networks. It contains basic information about the network elements and possibilities of their involvement. The steps are described so that all procedures were intelligible. The work contains various thoughts on various options for integration of network and end elements to be as effective as possible. Shown are various examples of design documentation, which should serve primarily as a good springboard. We can see the lists of VLANs, IP addresses, calculations of energy consumption and cooling requirements. The introductory section also presents a variety of topology and characteristics of networks and network elements. We deal with various technologies such as QoS, PoE, EteherChannel, Trunking, and more. We are also stacking switches and effective involvement of network elements. All these information was collected and on the basis of these applications have been developed, which should serve as online network documentation. The application is writing with Nette Framework, which also has support for Czech, so it is much material available, which relieved the work in an environment of PHP, MySQL, HTML and CSS. The result is a basic version that is ready to further develop and to be as user friendly as possible and ease the job of designing the network.
|
|
|
Dataset for Classification of Network Devices Using Machine Learning
Eis, Pavel ; Tisovčík, Peter (referee) ; Žádník, Martin (advisor)
Automatic classification of devices in computer network can be used for detection of anomalies in a network and also it enables application of security policies per device type. The key to creating a device classifier is a quality data set, the public availability of which is low and the creation of a new data set is difficult. The aim of this work is to create a tool, that will enable automated annotation of the data set of network devices and to create a classifier of network devices that uses only basic data from network flows. The result of this work is a modular tool providing automated annotation of network devices using system ADiCT of Cesnet's association, search engines Shodan and Censys, information from PassiveDNS, TOR, WhoIs, geolocation database and information from blacklists. Based on the annotated data set are created several classifiers that classify network devices according to the services they use. The results of the work not only significantly simplify the process of creating new data sets of network devices, but also show a non-invasive approach to the classification of network devices.
|
|
|
Automated Inference of User Interface for NETCONF Protocol
Man, Jakub ; Orsák, Michal (referee) ; Tisovčík, Peter (advisor)
Tato práce se zaměřuje na vytvoření uživatelsky přívětivého grafického rozhraní pro zařízení komunikující protokolem NETCONF. Bylo zvoleno řešení pomocí webového rozhraní, aby bylo použití co nejjednodušší a z pohledu uživatele nevyžadovalo další instalaci. V práci bylo vytvořeno uživatelské rozhraní obsahující systém pro rozšíření a knihovnu pro operace nad protokolem NETCONF. Knihovna pro NETCONF umožňuje uživatelům připojení k zařízením, uložení informací o zařízení do databáze, připojování ke skupinám zařízení pomocí profilů a modifikace konfiugrace zařízení. Systém rozšíření umožňuje výrobcům zařízení poskytnout uživatelům grafické rozhraní, které nevyžaduje další zaškolování uživatelů, aniž by museli vyvýjet celou aplikaci.
|
|
|
Information Fusion for Classification of Network Devices
Sedláček, Ondřej ; Tisovčík, Peter (referee) ; Žádník, Martin (advisor)
This work is focused on solving information fusion when dealing with multiple data sources in computer network monitoring. A solution built on the concept of classification rules configured by experts is presented. Configuration is simplified using a designated configuration language interpreted by the solution. The classification rules enable coverage of diverse types of data. The result is given as a label from specified taxonomy. Using a taxonomy maintains the different levels of detail between the data sources, even in the output label. The solution also uses the Dempster-Schafer theory for merging labels from different sources into a single output label. Results of experiments show that information fusion in this context does increase the accuracy of device classification. A process of rule optimization was developed based on testing and experiments with a dataset from a real network. The accuracy was increased by 19 % compared to the original solution using this process.
|
|
|
Dataset for Classification of Network Devices Using Machine Learning
Eis, Pavel ; Tisovčík, Peter (referee) ; Žádník, Martin (advisor)
Automatic classification of devices in computer network can be used for detection of anomalies in a network and also it enables application of security policies per device type. The key to creating a device classifier is a quality data set, the public availability of which is low and the creation of a new data set is difficult. The aim of this work is to create a tool, that will enable automated annotation of the data set of network devices and to create a classifier of network devices that uses only basic data from network flows. The result of this work is a modular tool providing automated annotation of network devices using system ADiCT of Cesnet's association, search engines Shodan and Censys, information from PassiveDNS, TOR, WhoIs, geolocation database and information from blacklists. Based on the annotated data set are created several classifiers that classify network devices according to the services they use. The results of the work not only significantly simplify the process of creating new data sets of network devices, but also show a non-invasive approach to the classification of network devices.
|
|
|
Automated Inference of User Interface for NETCONF Protocol
Man, Jakub ; Orsák, Michal (referee) ; Tisovčík, Peter (advisor)
Tato práce se zaměřuje na vytvoření uživatelsky přívětivého grafického rozhraní pro zařízení komunikující protokolem NETCONF. Bylo zvoleno řešení pomocí webového rozhraní, aby bylo použití co nejjednodušší a z pohledu uživatele nevyžadovalo další instalaci. V práci bylo vytvořeno uživatelské rozhraní obsahující systém pro rozšíření a knihovnu pro operace nad protokolem NETCONF. Knihovna pro NETCONF umožňuje uživatelům připojení k zařízením, uložení informací o zařízení do databáze, připojování ke skupinám zařízení pomocí profilů a modifikace konfiugrace zařízení. Systém rozšíření umožňuje výrobcům zařízení poskytnout uživatelům grafické rozhraní, které nevyžaduje další zaškolování uživatelů, aniž by museli vyvýjet celou aplikaci.
|
|
|
Network design support
Zemánek, Martin ; Fojtová, Lucie (referee) ; Pelka, Tomáš (advisor)
The work is focused on support of computer networks. It contains basic information about the network elements and possibilities of their involvement. The steps are described so that all procedures were intelligible. The work contains various thoughts on various options for integration of network and end elements to be as effective as possible. Shown are various examples of design documentation, which should serve primarily as a good springboard. We can see the lists of VLANs, IP addresses, calculations of energy consumption and cooling requirements. The introductory section also presents a variety of topology and characteristics of networks and network elements. We deal with various technologies such as QoS, PoE, EteherChannel, Trunking, and more. We are also stacking switches and effective involvement of network elements. All these information was collected and on the basis of these applications have been developed, which should serve as online network documentation. The application is writing with Nette Framework, which also has support for Czech, so it is much material available, which relieved the work in an environment of PHP, MySQL, HTML and CSS. The result is a basic version that is ready to further develop and to be as user friendly as possible and ease the job of designing the network.
|
guest ::
