|
|
Behaviour-Based Identification of Network Devices
Polák, Michael Adam ; Holkovič, Martin (oponent) ; Polčák, Libor (vedoucí práce)
This thesis deals with the topic of identifying devices based on their behaviour. With the increasing number of devices on the network, it is becoming more and more important to be able to identify these devices based on their behaviour, due to the increased security risks. General networking concepts and multiple methods that have been used in the past to identify devices are discussed throughout the work. Subsequently, machine learning algorithms and their advantages and disadvantages are introduced. Finally, this thesis tests two traditional machine learning algorithms and proposes two new approaches to network device identification. The resulting final algorithm achieves the accuracy of 89% on a real life data-set with over 10,000 devices using a set of only eight features.
|
|
|
I/O Virtualization in Networking
Perešíni, Martin ; Kekely, Lukáš (oponent) ; Martínek, Tomáš (vedoucí práce)
There are many different reasons for companies and organizations to invest in virtualization today, but it is probably safe to assume that financial motivation is number one on the list. Virtualization can save a lot of money. This thesis deals with the problem of I/O virtualization in the network environment in order to keep pace with this trend. The ultimate goal of this thesis is to develop working I/O virtualization software drivers that operate with FPGA-accelerated cards, thus enhancing their potential even more and saving the operational costs of big data centers. Their main benefits should be re-usability (flexibility) in a virtualized environment with the smallest possible performance loss. The theoretical part deals with current trends in I/O virtualization, technologies such as virtio, vhost, SR-IOV, VFIO and mediated devices. The practical part of this thesis suggests two ways of addressing this problematic. The first is to use software-emulation virtio technology. The second is based on the hybrid paravirtualization VFIO-mdev technology. Both approaches have different benefits in terms of performance and device manageability. Each solution's use case has its own drawback, like the complexity of the solution and the problematic integration into the system. The desired goals were achieved and manifested in the final form of the prototype driver nfb_mdev.
|
|
|
Prostředí pro monitorování přístupu ke zdrojům v síti s využitím technologie OnePK
Kollát, Samuel ; Polčák, Libor (oponent) ; Ryšavý, Ondřej (vedoucí práce)
V tejto práci je popísaný návrh , architektúra a implementácia systému , ktorý slúži k monitorovaniu služieb a súborov v počítačovej sieti . Monitorovací systém je založený na princípu softvérovo definovaných sietí . Prvá časť práce sa zameriava na popis princípov SDN a platformy OnePK , ktorá je využitá na návrh monitorovacieho systému . Samotné jadro práce sa zameriava na využitie platformy OnePK , návrh , dekompozíciu a výslednú implementáciu spojenú s testovaním monitorovacieho systému .
|
|
|
Behaviour-Based Identification of Network Devices
Polák, Michael Adam ; Holkovič, Martin (oponent) ; Polčák, Libor (vedoucí práce)
This thesis deals with the topic of identifying devices based on their behaviour. With the increasing number of devices on the network, it is becoming more and more important to be able to identify these devices based on their behaviour, due to the increased security risks. General networking concepts and multiple methods that have been used in the past to identify devices are discussed throughout the work. Subsequently, machine learning algorithms and their advantages and disadvantages are introduced. Finally, this thesis tests two traditional machine learning algorithms and proposes two new approaches to network device identification. The resulting final algorithm achieves the accuracy of 89% on a real life data-set with over 10,000 devices using a set of only eight features.
|
|
|
I/O Virtualization in Networking
Perešíni, Martin ; Kekely, Lukáš (oponent) ; Martínek, Tomáš (vedoucí práce)
There are many different reasons for companies and organizations to invest in virtualization today, but it is probably safe to assume that financial motivation is number one on the list. Virtualization can save a lot of money. This thesis deals with the problem of I/O virtualization in the network environment in order to keep pace with this trend. The ultimate goal of this thesis is to develop working I/O virtualization software drivers that operate with FPGA-accelerated cards, thus enhancing their potential even more and saving the operational costs of big data centers. Their main benefits should be re-usability (flexibility) in a virtualized environment with the smallest possible performance loss. The theoretical part deals with current trends in I/O virtualization, technologies such as virtio, vhost, SR-IOV, VFIO and mediated devices. The practical part of this thesis suggests two ways of addressing this problematic. The first is to use software-emulation virtio technology. The second is based on the hybrid paravirtualization VFIO-mdev technology. Both approaches have different benefits in terms of performance and device manageability. Each solution's use case has its own drawback, like the complexity of the solution and the problematic integration into the system. The desired goals were achieved and manifested in the final form of the prototype driver nfb_mdev.
|
|
|
Prostředí pro monitorování přístupu ke zdrojům v síti s využitím technologie OnePK
Kollát, Samuel ; Polčák, Libor (oponent) ; Ryšavý, Ondřej (vedoucí práce)
V tejto práci je popísaný návrh , architektúra a implementácia systému , ktorý slúži k monitorovaniu služieb a súborov v počítačovej sieti . Monitorovací systém je založený na princípu softvérovo definovaných sietí . Prvá časť práce sa zameriava na popis princípov SDN a platformy OnePK , ktorá je využitá na návrh monitorovacieho systému . Samotné jadro práce sa zameriava na využitie platformy OnePK , návrh , dekompozíciu a výslednú implementáciu spojenú s testovaním monitorovacieho systému .
|
host ::
RSS.