Systémy pro detekci a prevenci průniků
Loading...
Date
Authors
ORCID
Advisor
Referee
Mark
B
Journal Title
Journal ISSN
Volume Title
Publisher
Vysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií
Abstract
{V rámci semestrálnej práce je našou úlohou zoznámiť sa s~problematikou IDS/IPS. Vytvoríme rozbor výhod a~nevýhod použitých open~source IDS/IPS systémov a~ich zaradenie do siete. Práca poukazuje na problematiku NIDS, ktoré bude umiestnené v sieti na trase komunikácie medzi koncovými užívateľmi. Po vhodnom nastavení NIDS klienta budeme zachytávať a~analyzovať komunikáciu, ktorá smeruje od útočníka pomocou programov Snort a~Suricata. Bude nám nato slúžiť balík stiahnutých a~v~prípade potreby vlastných pravidiel na základe ktorých bude NIDS systém riadiť tok dát. Pre testovanie bol použitý SYN flood útok na server pomocou programu Hping3 v OS Linux Kali čo je distribúcia vytvorená za účelom penetračných testov a~obsahuje mnoho užitočných programov. Pomocou NIDS budeme kontrolovať zachytené pakety v grafickom výstupe.
The terminal essay aims to introduce the issue of IDS and IPS and their incorporation into a network. An analysis of pros and cons of used open source IDS/IPS systems will be created together with their inclusion into the network. In addition, we focus on the issue of NIDS that will be located in the network’s path of communication among end users. Following the appropriate setting of NIDS of a client we will be receiving and analyzing all communication directed from the attacker with the help of Snort and Suricata programs. The activities will be conducted thanks to a downloaded package and in the case of a need we will use our own rules that will guide the NIDS system of data control. Regarding the testing phase, we have used the SYN flood attack on server via program Hping3 in OS Linus Kali, which is a distribution created with an aim to conduct a penetration tests and in addition it includes several useful programs. The NIDS will help us to gradually control captured packets.
The terminal essay aims to introduce the issue of IDS and IPS and their incorporation into a network. An analysis of pros and cons of used open source IDS/IPS systems will be created together with their inclusion into the network. In addition, we focus on the issue of NIDS that will be located in the network’s path of communication among end users. Following the appropriate setting of NIDS of a client we will be receiving and analyzing all communication directed from the attacker with the help of Snort and Suricata programs. The activities will be conducted thanks to a downloaded package and in the case of a need we will use our own rules that will guide the NIDS system of data control. Regarding the testing phase, we have used the SYN flood attack on server via program Hping3 in OS Linus Kali, which is a distribution created with an aim to conduct a penetration tests and in addition it includes several useful programs. The NIDS will help us to gradually control captured packets.
Description
Citation
PITSCHMANN, A. Systémy pro detekci a prevenci průniků [online]. Brno: Vysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií. 2017.
Document type
Document version
Date of access to the full text
Language of document
cs
Study field
Teleinformatika
Comittee
doc. Mgr. Pavel Rajmic, Ph.D. (předseda)
Ing. Zdeněk Martinásek, Ph.D. (místopředseda)
Ing. Martin Plšek, Ph.D. (člen)
Ing. Rastislav Červenák (člen)
Ing. Patrik Morávek, Ph.D. (člen)
Ing. Jan Mašek, Ph.D. (člen)
Date of acceptance
2017-06-19
Defence
V zadání práce máte uveden otestovat zvolené nástroje na nejméně 5 DoS útocích. Jaké útoky jste pro testování použil?
Result of defence
práce byla úspěšně obhájena
Document licence
Standardní licenční smlouva - přístup k plnému textu bez omezení