|
|
Web Services Security for a Service Consumer
Novotný, Petr ; Weiss, Petr (referee) ; Rychlý, Marek (advisor)
The objective of this project was to introduce to a reader different possibilities of a web security and its authentication. Another part of this project was to create a client application communicates with the web service. The client part should at the some time serve the web services developer for checking chosen web securities.
|
|
|
Secure Development Framework for Web Applications
Mazura, František ; Ovšonka, Daniel (referee) ; Barabas, Maroš (advisor)
This thesis deals with the theoretical analysis of vulnerabilities in web applications, especially the most frequent vulnerabilities of OWAST TOP 10 are examined. These vulnerabilities are subsequently analyzed for the design of a web application development framework and practically implemented in this framework to prevent the vulnerabilities or, if necessary, defend itself. The main goal of the implementation is to achieve such a framework so that the programmer of the resulting web application is protected to the utmost.
|
|
|
Integration of tools for vulnerability scanning
Štangler, Jan ; Gerlich, Tomáš (referee) ; Lieskovan, Tomáš (advisor)
The bachelor thesis is focused on the field of penetration testing, in which it offers a comprehensive tool for automated scanning of vulnerabilities with selected tools. There are described the basic techniques of penetration tests, web vulnerabilities by OWASP Top 10, examples of vulnerability attacks and defense against them. An important point is the list of useful tools in manual and semi-automated penetration tests. The main goal is to design architecture and implementation of Vixen, which integrates selected tools for penetration testing.
|
|
|
Security Aspects of Applications in Angular 5 Platform
Čermáková, Martina ; Zeman, Václav (referee) ; Burda, Karel (advisor)
The bachelor thesis is focused on security aspects of Single Page Application in An- gular 5. The main goal is to introduce security risks for developing a web applications and afterwards to implement author’s own knowledge that should guarantee security of the developed application. In theoretical part the reader is introduced to OWASP Top Ten project and security risks in backend, where is primary put stress on XSS and CSRF attacks. In practical part there is created a web application in Angular 5, there are simulations of XSS and CSRF attacks including explanation and fix of security issue. The thesis also aims at security of REST service and includes a summarizing list of recommendations for developers to know how to create secure web applications.
|
|
|
Secure Coding Guidelines for Python
Zádrapa, Jan ; Holop, Patrik (referee) ; Malinka, Kamil (advisor)
S narůstajícím počtem kybernetických útoků a vzrůstající cenou jejich dopadů se zvyšuje také poptávka po znalosti bezpečného programování. Python jako aktuálně nejoblíbenější programovací jazyk se stal nedílnou součástí této problematiky. Spousta programátorů umí Python používat, ale neumí jej používat bezpečně. Tomuto problému nepomáhá ani to, že samotný Python nemá dostatek pokynů a výukových materiálů pro bezpečnostní problematiku. Cílem této práce je informovat o největších bezpečnostních hrozbách programování v Pythonu a zároveň zajistit řešení těchto situací. Zaměření práce je na poučení veřejnosti pomocí výukových materiálů v podobě pokynů a výukové pomůcky. Výuková pomůcka v podobě webové aplikace by měla být přehledná a použitelná pro veřejnost. Součástí aplikace je také několik příkladů implementace zranitelností z reálného světa.
|
|
|
Optimizing JShelter Performance
Zmitko, Martin ; Polčák, Libor (referee) ; Hranický, Radek (advisor)
This thesis aims to lessen the impact of JShelter on the browsing experience. The goal was accomplished by measuring the performance of JShelter and analyzing the hotspots that impacted browsing performance the most. Finally, optimizations based on analysis results while leaving the high provided level of protection uncompromised were proposed and implemented. JShelter's fingerprinting protections based on image and audio data processing were optimized by extending them with a more efficient implementation using WebAssembly, which, in some cases, was faster by up to 50 times. The performance while loading web pages was increased with changes in configuration loading and injection mechanisms, on average by 13.5 %.
|
|
|
Login Forms Detection Tool
Sohr, Jakub ; Jurek, Michael (referee) ; Martinásek, Zdeněk (advisor)
The rapid growth of the internet and the increasing complexity of web applications have resulted in a rising need for robust and user-friendly cybersecurity tools. This thesis presents the design, implementation, and evaluation of a Web-based Login Interface Detection Tool, which aims to assist security professionals in identifying and assessing potential login interfaces on a variety of websites. By automating this process, the tool seeks to streamline the identification of possible security vulnerabilities and assist in penetration testing efforts. The web interface for the Login Interface Detection Tool has been developed using modern frontend technologies and frameworks, such as Vue.js and Socket.IO, to provide an intuitive and responsive user experience. This thesis describes the design principles and user interface elements that have been employed, as well as the implementation of the underlying Vue.js and Socket.IO frameworks for real-time communication between the client and server. Through a comprehensive examination of the design, implementation, and security considerations for the Web-based Login Interface Detection Tool, this thesis demonstrates the potential of modern technologies in the development of advanced cybersecurity tools.
|
|
|
Secure Coding Guidelines for Python
Zádrapa, Jan ; Holop, Patrik (referee) ; Malinka, Kamil (advisor)
S narůstajícím počtem kybernetických útoků a vzrůstající cenou jejich dopadů se zvyšuje také poptávka po znalosti bezpečného programování. Python jako aktuálně nejoblíbenější programovací jazyk se stal nedílnou součástí této problematiky. Spousta programátorů umí Python používat, ale neumí jej používat bezpečně. Tomuto problému nepomáhá ani to, že samotný Python nemá dostatek pokynů a výukových materiálů pro bezpečnostní problematiku. Cílem této práce je informovat o největších bezpečnostních hrozbách programování v Pythonu a zároveň zajistit řešení těchto situací. Zaměření práce je na poučení veřejnosti pomocí výukových materiálů v podobě pokynů a výukové pomůcky. Výuková pomůcka v podobě webové aplikace by měla být přehledná a použitelná pro veřejnost. Součástí aplikace je také několik příkladů implementace zranitelností z reálného světa.
|
|
|
Security Aspects of Applications in Angular 5 Platform
Čermáková, Martina ; Zeman, Václav (referee) ; Burda, Karel (advisor)
The bachelor thesis is focused on security aspects of Single Page Application in An- gular 5. The main goal is to introduce security risks for developing a web applications and afterwards to implement author’s own knowledge that should guarantee security of the developed application. In theoretical part the reader is introduced to OWASP Top Ten project and security risks in backend, where is primary put stress on XSS and CSRF attacks. In practical part there is created a web application in Angular 5, there are simulations of XSS and CSRF attacks including explanation and fix of security issue. The thesis also aims at security of REST service and includes a summarizing list of recommendations for developers to know how to create secure web applications.
|
|
|
Integration of tools for vulnerability scanning
Štangler, Jan ; Gerlich, Tomáš (referee) ; Lieskovan, Tomáš (advisor)
The bachelor thesis is focused on the field of penetration testing, in which it offers a comprehensive tool for automated scanning of vulnerabilities with selected tools. There are described the basic techniques of penetration tests, web vulnerabilities by OWASP Top 10, examples of vulnerability attacks and defense against them. An important point is the list of useful tools in manual and semi-automated penetration tests. The main goal is to design architecture and implementation of Vixen, which integrates selected tools for penetration testing.
|
guest ::
