|
|
SSH Public Key Management in FreeIPA and SSSD
Cholasta, Jan ; Smrčka, Aleš (referee) ; Zelený, Jan (advisor)
SSH je jeden z nejpoužívanějších protokolů pro vzdálený přístup v Internetu. SSH je flexibilní a rozšiřitelný protokol, který se skládá ze tří hlavních součástí: SSH transportního protokolu, který obstarává důvěrnost, integritu a autentizaci serveru, SSH autentizačního protokolu, který obstarává autentizaci uživatelů a SSH spojovacího protokolu, který obstarává multiplexování více kanálů různých typů (interaktivní sezení, přesměrování TCP/IP spojení, atd.) do jednoho spojení. OpenSSH je jedna z nejrozšířenějších implemetací SSH. OpenSSH obsahuje SSH server, SSH klienty, generátor SSH klíčů a autentizační agent, který usnadňuje autentizaci pomocí veřejných klíčů. FreeIPA a SSSD jsou projekty poskytující centrální správu identit pro Linuxové a Unixové systémy. Tyto projekty sice v době psaní této práce přímou podporu SSH neobsahovaly, ale do jisté míry je ve spojení s OpenSSH používat možné bylo.
|
|
|
Information System Design
Diviš, Jiří ; Zmek, Bohuslav (referee) ; Koch, Miloš (advisor)
This bachelor thesis focuses on designing an administration optimization in the IDM (Identity Management) system. The basis of the proposal is created by an analysis of the current state of the system at the University Hospital in Bohunice. The proposed improvement is bound to speed up the daily workload. The utilization of users' administrative rights and the correct access and rights setting in individual hospital systems will increase the security, speed and efficiency of the system.
|
|
|
Corporation Identity Management System Design
Nop, Dominik ; Klimeš,, Daniel (referee) ; Ondrák, Viktor (advisor)
This bachelor thesis’ main task is development of a new variation of the corporal identity management system. Firstly, this thesis deals with theoretical knowledge related to the subject of identity management. Secondly, it analyses the current status of the identity management system in a company ABC. A plan for system improvement in this work is based on this analysis and theoretical knowledge as well. Finally, the work contains an evaluation and suggests possible improvements of the new system for the future time.
|
|
|
Corporate Identity and Access Management System Architecture Improvement Proposal
Nop, Dominik ; MBA, Igor Gricinko, (referee) ; Ondrák, Viktor (advisor)
The master thesis focuses on assessment of current implementation of identity management system and proposal of a new implementation to increase level of stability and information security in the company, primarily regarding the systems that process financial data. In first part, basic theoretical knowledge related to identity management systems is defined. In second part, an analysis of current system state is performed. Based on this analysis, new organizational and technical solutions are proposed to the company. Finally, an implementation project proposal as well as with risk analysis and economic evaluation is completed in the end of this thesis.
|
|
|
Processing of XML Descriptions of OTP
Kubát, Petr ; Očenášek, Pavel (referee) ; Zelený, Jan (advisor)
Tato práce se zaměřuje na návrh a implementaci modulárního programu pro zpracování XML popisu OTP klíčů používaných především v zařízeních od výrobců Yubico a RSA. Zároveň také práce popisuje návrh a implementaci modulu pro vložení získaných informací do adresářového serveru 389DS. Součástí práce je seznámení s OTP, standartem PSKC a protokolem LDAP. Dále je v práci uveden návrh a implementace obou částí programu. V závěru práce rozebírá možnosti dalšího vývoje aplikace.
|
|
|
Company Identity Management Changes Proposal
Hruška, David ; Hanyk, Tomáš (referee) ; Ondrák, Viktor (advisor)
This diploma thesis focuses on the proposal to implement changes of identity management into a particular company. In the theoretical part are the basic concepts and a detailed description of the identity management. There is also described an analysis of the current state of information security in the company, risk analysis and selection of measures to minimize the risks found. At the end of this thesis are proposed changes, their procedure and timetable for implementation of selected measures.
|
|
|
Identity management
Kefer, Daniel ; Polívka, Michal (referee) ; Pelka, Tomáš (advisor)
The master thesis is divided into two parts. In the first part, identity management is described on theoretical basis. Particular domains of identity management including authentication, authorization and audit are explained as well as Single Sign-On concept, i.e. using single credentials and entering them just once for access to multiple independent systems or services. In the second part, which forms the main part of this thesis, a practical project was implemented on the infrastructure of the Department of Telecommunications within the Faculty of Electrical Engineering and Communication, Brno University of Technology. The goal of this project was to create an environment for central 4 authentication and Single Sign-On using only open source technologies within a computer laboratory used for teaching OS Linux. The project is based on OS Linux Debian, Kerberos as a protocol for secure authentication and LDAP server OpenLDAP. For the Single Sign-On demonstration, NFS services for accessing data on the network were chosen. Using NFS services, users can sign-on to any workstation and access all their data. Administration of users and their import from central FEEC databases was implemented using scripts developed in Python. Next, using Apache, PHP and MySQL, a front-end audit interface for the network administrator was developed in order to inspect and evaluate security events in the network. Messages about suspicious events are delivered to administrator’s mailbox in real time. The project is intended as a security platform which means that other services can be implemented for Single Sign-On as well as new mechanisms for evaluation of suspicious events.
|
|
| |
|
| |
|
|
Mutli-Dimensional Access Control in Web Applications
Grešša, Pavol ; Burget, Radek (referee) ; Kolář, Dušan (advisor)
This master's thesis deals with the analysis, design and implementation of authentication and authorization subsystem into the environment of distributed web application. It unifies the well-known security models into the one universal security model that can be used for the development of authorization device enabling the user to secure the applications with various security models. Furthermore, it applies this integration of models into the Takeplace system.
|
guest ::
