|
|
A Tool for Development of OVAL Definitions within OpenSCAP Project
Černý, Jan ; Rogalewicz, Adam (referee) ; Smrčka, Aleš (advisor)
This thesis deals with the SCAP standard, used in area of computer security, and describes its open source implementation OpenSCAP. The analysis focuses on OVAL, a language for determining vulnerabilities and configuration issues on computer systems. Typical problems of OVAL are discussed. Based on obtained findings, an extension of the OpenSCAP project for reporting and diagnostics of OVAL interpretation has been designed. The thesis describes implementation, integration and testing of proposed extension.
|
|
|
Design of information system CRM module
Honajzer, Martin ; Zbořil, Miroslav (referee) ; Lacko, Branislav (advisor)
The aim of this work is to analyze and design model completely prepared for the developing team which must be able to build a fully functional CRM modul for company offering computer training. Through the use of UML diagrams it will figure out functions offered by the modul and the way, how these functions are accessible to the user. This work will also suggest some possibilities of work between this modul and the database in the SQL language.
|
|
|
Automated measurement of transient phenomena of synchronous generators
Hvězda, Jindřich ; Huzlík, Rostislav (referee) ; Vítek, Ondřej (advisor)
My master´s thesis named “Automated measurement of transient phenomena of synchronous generators“ deals with transient phenomena appearing during a three-phase short-circuit on output clips of synchronous generators. Introduction of my master´s thesis named “Theory of transient phenomena of synchronous generators” deals with a theoretic description of transient phenomena appearing during a three-phase short-circuit on output clips of synchronous generators. This part treats the existence of direct and alternating components of short-circuit currents flowing in stator winding during a three-phase short circuit. Afterwards it treats reactances of stator windidng for the duration of a three-phase short-circuit on clips of synchronous generators. Theme of the following part of the master´s thesis is “Technical setting of measuring system for analysis of transient phenomena of synchronous generators”. This part deals with an analysis of technical setting that characterizes measuring sensors. These sensors scan measured electrical magnitudes that describe transient phenomena. Measuring hardware by a firm National Instruments is designed on the basis of technical setting. Following part of the master´s thesis named “Measuring hardware for measuring of transient phenomena of synchronous generators as a platform PXI/SCXI” deals with a description of technical characteristics of designed measuring hardware for measuring transient phenomena. Practical part of the master´s thesis named “Software TransientVIEW for analysis of transient phenomena of synchronous generators” describes in detail a software conception of user interface of software TransientVIEW that is developed in a developing interface LabVIEW 8.6 by the firm National Instruments. Afterwards it treats implemented user functions that allows exact and effective work with analysis of transient phenomena of synchronous generators.
|
|
|
Dynamic Analysis of Programs Using Library Calls
Malík, Viktor ; Peringer, Petr (referee) ; Smrčka, Aleš (advisor)
The objective of this bachelor's thesis is development of dynamic software analysis which monitors library calls of analysed program. The proposed analyser doubles library call routines in order to create different program runs. These runs are then aggregated into a single control flow graph which can be used for subsequent program analysis. Monitoring and controlling the calls is realised via stubs and wrappers encapsulated within a dynamic shared library for GNU/Linux operating system. The proof of concept is shown on dynamic analyser focused on file system library calls.
|
|
|
Practical Application of Facebook Infer on Systems Code
Beránek, Tomáš ; Malík, Viktor (referee) ; Vojnar, Tomáš (advisor)
Statická analýza je dnes často využívána ve vývojovém procesu pro hledání defektů v produkovaném softwaru. I když nástroje na statickou analýzu dokáží hledat defekty v softwarech o miliónech řádků kódu, mají také řadu nevýhod. Hlavními nevýhodami jsou náročnost nasazení nástroj na vyvíjený projekt, vysoký počet falešných hlášení a časové i paměťové požadavky. Tato práce se zaměřuje na zmírnění těchto negativních vlastností u nástroje Facebook Infer, zejména pro analýzu Linuxových nástrojů v podobě SRPM balíčků. Pro zjednodušení nasazení byl vytvořen modul pro nástroj csmock, který umožňuje automaticky spouštět statické analyzátory nad balíčky pro CentOS a Fedoru. Pro snížení počtu falešných hlášení byl vytvořen filtr, který filtruje výstup Inferu podle heuristik, které byly navrženy na základě zkušeností získaných kontrolou hlášení z Inferu. Filtr byl také zapojen do modulu pro csmock a otestován na řadě balíčků. Na analyzovaných balíčcích filtr dokázal odstranit 60 % falešných hlášení se ztrátou 2.5 % skutečných defektů. Doba potřebná pro běh analýzy může být zkrácena použitím inkrementální analýzy. U inkrementální analýzy Inferu byly experimentálně zjištěny nedostatky, proto se tato práce věnuje také vytvoření nástavby nad Inferem, která nahrazuje inkrementální analýzu v Inferu.
|
|
|
Practical Application of Facebook Infer on Systems Code
Beránek, Tomáš ; Malík, Viktor (referee) ; Vojnar, Tomáš (advisor)
Statická analýza je dnes často využívána ve vývojovém procesu pro hledání defektů v produkovaném softwaru. I když nástroje na statickou analýzu dokáží hledat defekty v softwarech o miliónech řádků kódu, mají také řadu nevýhod. Hlavními nevýhodami jsou náročnost nasazení nástroj na vyvíjený projekt, vysoký počet falešných hlášení a časové i paměťové požadavky. Tato práce se zaměřuje na zmírnění těchto negativních vlastností u nástroje Facebook Infer, zejména pro analýzu Linuxových nástrojů v podobě SRPM balíčků. Pro zjednodušení nasazení byl vytvořen modul pro nástroj csmock, který umožňuje automaticky spouštět statické analyzátory nad balíčky pro CentOS a Fedoru. Pro snížení počtu falešných hlášení byl vytvořen filtr, který filtruje výstup Inferu podle heuristik, které byly navrženy na základě zkušeností získaných kontrolou hlášení z Inferu. Filtr byl také zapojen do modulu pro csmock a otestován na řadě balíčků. Na analyzovaných balíčcích filtr dokázal odstranit 60 % falešných hlášení se ztrátou 2.5 % skutečných defektů. Doba potřebná pro běh analýzy může být zkrácena použitím inkrementální analýzy. U inkrementální analýzy Inferu byly experimentálně zjištěny nedostatky, proto se tato práce věnuje také vytvoření nástavby nad Inferem, která nahrazuje inkrementální analýzu v Inferu.
|
|
|
A Tool for Development of OVAL Definitions within OpenSCAP Project
Černý, Jan ; Rogalewicz, Adam (referee) ; Smrčka, Aleš (advisor)
This thesis deals with the SCAP standard, used in area of computer security, and describes its open source implementation OpenSCAP. The analysis focuses on OVAL, a language for determining vulnerabilities and configuration issues on computer systems. Typical problems of OVAL are discussed. Based on obtained findings, an extension of the OpenSCAP project for reporting and diagnostics of OVAL interpretation has been designed. The thesis describes implementation, integration and testing of proposed extension.
|
|
|
Dynamic Analysis of Programs Using Library Calls
Malík, Viktor ; Peringer, Petr (referee) ; Smrčka, Aleš (advisor)
The objective of this bachelor's thesis is development of dynamic software analysis which monitors library calls of analysed program. The proposed analyser doubles library call routines in order to create different program runs. These runs are then aggregated into a single control flow graph which can be used for subsequent program analysis. Monitoring and controlling the calls is realised via stubs and wrappers encapsulated within a dynamic shared library for GNU/Linux operating system. The proof of concept is shown on dynamic analyser focused on file system library calls.
|
|
|
Design of information system CRM module
Honajzer, Martin ; Zbořil, Miroslav (referee) ; Lacko, Branislav (advisor)
The aim of this work is to analyze and design model completely prepared for the developing team which must be able to build a fully functional CRM modul for company offering computer training. Through the use of UML diagrams it will figure out functions offered by the modul and the way, how these functions are accessible to the user. This work will also suggest some possibilities of work between this modul and the database in the SQL language.
|
|
|
Automated measurement of transient phenomena of synchronous generators
Hvězda, Jindřich ; Huzlík, Rostislav (referee) ; Vítek, Ondřej (advisor)
My master´s thesis named “Automated measurement of transient phenomena of synchronous generators“ deals with transient phenomena appearing during a three-phase short-circuit on output clips of synchronous generators. Introduction of my master´s thesis named “Theory of transient phenomena of synchronous generators” deals with a theoretic description of transient phenomena appearing during a three-phase short-circuit on output clips of synchronous generators. This part treats the existence of direct and alternating components of short-circuit currents flowing in stator winding during a three-phase short circuit. Afterwards it treats reactances of stator windidng for the duration of a three-phase short-circuit on clips of synchronous generators. Theme of the following part of the master´s thesis is “Technical setting of measuring system for analysis of transient phenomena of synchronous generators”. This part deals with an analysis of technical setting that characterizes measuring sensors. These sensors scan measured electrical magnitudes that describe transient phenomena. Measuring hardware by a firm National Instruments is designed on the basis of technical setting. Following part of the master´s thesis named “Measuring hardware for measuring of transient phenomena of synchronous generators as a platform PXI/SCXI” deals with a description of technical characteristics of designed measuring hardware for measuring transient phenomena. Practical part of the master´s thesis named “Software TransientVIEW for analysis of transient phenomena of synchronous generators” describes in detail a software conception of user interface of software TransientVIEW that is developed in a developing interface LabVIEW 8.6 by the firm National Instruments. Afterwards it treats implemented user functions that allows exact and effective work with analysis of transient phenomena of synchronous generators.
|
guest ::
