|
|
DNS library for a high-performance DNS server
Slovák, Ľuboš ; Peterka, Jiří (advisor) ; Yaghob, Jakub (referee)
In this thesis I design and implement a high-performance library for developing authoritative name server software. The library supports all basic as well as several advanced features of the DNS protocol, such as EDNS0, DNSSEC or zone transfers. It is designed to be modular, extensible and easy to use. The library was integrated into an experimental server implementation used for testing and benchmarking. Its performance is evaluated and proved to be superior to prevalent implementations in most cases. The thesis also provides theoretic background and a deep analysis of the task together with detailed description of the implemented solutions.
|
|
|
IMAP extension for mobile devices
Kundrát, Jan ; Peterka, Jiří (advisor) ; Spousta, Miroslav (referee)
With the mass availability of smartphones, mobile access to e-mail is gaining importance. Over the years, the IMAP protocol has been extended with many features ranging from extensions adding new functionality to those improving efficiency over an unreliable network. This thesis evaluates the available extensions based on their suitability for use in the context of a mobile client. Three new extensions have been developed, each improving the protocol in a distinct way. The thesis also discusses how most of these extensions were implemented in Trojitá, the author's free software open source IMAP e-mail client.
|
|
|
Threat management for CERT/CSIRT teams
Machálek, Jiří ; Peterka, Jiří (advisor) ; Lukeš, Dan (referee)
The increasing importance of the Internet as an integral part of contemporary society has stressed the need to formalize the process of response to security incidents that accompany it inseparably. Security teams of the CERT/CSIRT type are established at different levels for this purpose. These teams respond to reports from their constituency and cooperate with other teams. This thesis introduces the reader to the issues these teams deal with and analyzes their needs in resolving threats and problems related to DNS and its domains. Part of the work is an overview of the basic existing tools to support the work of CERT/CSIRT teams to solve problems with domains, the design of a tool Malicious Domain Manager and description of its implementation. The results of test run of this tool by CZ.NIC-CSIRT team show its contribution to security of DNS.
|
|
|
Secure Communicator
Gažo, Matúš ; Galamboš, Leo (advisor) ; Peterka, Jiří (referee)
Secured long-distance communication has always been an important topic for people handling sensitive information. Now with the arrival of ``intelligent`` mobile phones eavesdropping and information gathering is as easy as never. Luckily smartphones present not only problems in terms of security but also an opportunity to protect ones privacy. This thesis attempts to construct a generic software architecture of a communicator which could be capable of transferring voice, video and other various forms of binary data in a secure way. It will analyse and use different communication channels to reach a maximum level of data authenticity, integrity and confidentiality in an environment where a central security element needs to be avoided. The resulting architecture will be tested on a Voice-over-IP (VoIP) application prototype for the mobile Google Android platform to show whether the approach is practically usable on currently available phones.
|
|
|
Směrovací politiky
Hlaváček, Tomáš ; Peterka, Jiří (advisor) ; Spousta, Miroslav (referee)
Routing policies are important aspects of Internet routing. Routing policies can be interpreted or translated in order to help with router configuration and troubleshooting of large scale routing. In this bachelor's thesis I am discussing aspects of writing and interpreting routing policies in RPSL language. The thesis is based on my previous software project BGF, which is a RPSL interpreter and translator written in Perl 5.
|
|
|
A system for monitoring the quality of connectivity
Vyskočil, Vladimír ; Peterka, Jiří (advisor) ; Děcký, Martin (referee)
The aim of the theses is to design a methodology for centralized monitoring of data traffic in an ISP network that would detect individual connection with connectivity problems, and evaluate these problems. The methodology should at least evaluate packet loss and latency between a centrally located monitoring point and endpoints at user premises. A further goal is to implement this methodology, test it and evaluate the results.
|
|
|
Monitoring of SLD DNS servers
Šťastný, Petr ; Peterka, Jiří (advisor) ; Lukeš, Dan (referee)
This publication directly follows the bachelor thesis. It contains necessary theory of HTTP, SMTP and some other protocols and services. This knowledge is then used to draw a methodology to build additional tests to verify availability and functionality of basic Internet services of a domain name. This methodology is then implemented as an application that uses distributed processing to analyse a large number of domains. Obtained results are then compiled into statistical outputs. One chapter is also devoted to overview of the attacks on DNS and security options of DNS servers and domain records.
|
|
|
DoS a DDoS útoky na SIP protokol
Staněk, Jan ; Peterka, Jiří (advisor) ; Vozňák, Miroslav (referee)
The aim of this diploma thesis is to get accustomed with the SIP protocol and with the problematics of attacks targeting this protocol, with the emphasis on DoS and DDoS attacks. The thesis focuses on detailed classification of the attacks, possibilities and forms of generation of the attacks and methodics of defense against them. The attacks of the flood type are especially stressed because they are easily generated and the SIP components are very prone to these attacks. Prototype implementations of the most important ideas concerning attack generation and protection against these attacks are also part of this thesis. Practical tests of the implementations performed in a simulated SIP environment are also included. 1
|
|
|
Implementation of alternative metric in AODV protocol
Dajčár, Matej ; Novotný, Miroslav (advisor) ; Peterka, Jiří (referee)
There is a lot of alternative routing protocols used in wireless communications. One of these protocols is Ad Hoc On-Demand Distance Vector routing protocol (AODV). This protocol is used in the mobile ad-hoc networks which are self-configuring networks consisting of the independent mobile devices where each one of these devices acts as a router and forwards traffic from other devices. AODV protocol uses hop count as a routing metric, but in the many cases this metric is not optimal in the wireless networks. The goal of this thesis is to propose the alternative criteria which can be used to select best routes. An integral part of this thesis is the experimental implementations of suggested metrics which will be simulated and evaluated in the selected simulation tool. The conclusion of the thesis analyses results obtained from the simulations of the individual suggested versions.
|
|
|
SIP traffic analyzer
Šterbák, Ondrej ; Yaghob, Jakub (referee) ; Peterka, Jiří (advisor)
Session Initiation Protocol (SIP) is an application-layer control signaling protocol for creating, modifying, and terminating sessions with one or more participants. These sessions include Internet telephone calls, multimedia distribution, and multimedia conferences. This document briefly describes overview of SIP and is discussing the solutions to different problems which happen when is SIP used in home environment. It is looking for the solutions to actual Internet drafts, which have not been approved yet. It also includes detailed guide for capturing SIP network communication by using libpcap format, design of analyzer of problems in this communication and its implementation in Perl programming language. Three sample SIP communications are captured - functional, partly functional and non-functional and the analyzer show its capabilities on them.
|
guest ::
RSS feed.