Project Details

Automatizované zpracování útoků

Project Period: 1. 10. 2009 - 30. 9. 2013

Project Type: grant

Code: FR-TI1/037

Agency: Ministry of Industry and Trade of the Czech Republic

Program: TIP

English title
Automated attack processing
Type
grant
Keywords

Enterprise networks, Honeypot, KDD-99, behavioral model, signatures

Abstract

Large-scale computer networks resilience against attacks and malware -- development and implementation of a new method for automatic detection of attacks and malware

Team members
Švéda Miroslav, prof. Ing., CSc. (DIFS FIT BUT) , research leader
Barabas Maroš, Ing., Ph.D. (DITS FIT BUT) , team leader
Drahanský Martin, prof. Ing., Dipl.-Ing., Ph.D. (DITS FIT BUT) , team leader
Drozd Michal, Ing. (DITS FIT BUT) , team leader
Hanáček Petr, doc. Dr. Ing. (DITS FIT BUT) , team leader
Chmelař Petr, Ing. (DIFS FIT BUT) , team leader
Orság Filip, Ing., Ph.D. (DITS FIT BUT) , team leader
Antal Lukáš, Ing. (FIT BUT)
Bláha Lukáš, Ing. (FIT BUT)
Homoliak Ivan, doc. Ing., Ph.D. (FIT BUT)
Publications

2013

  • HOMOLIAK Ivan, BARABAS Maroš, CHMELAŘ Petr, DROZD Michal and HANÁČEK Petr. Advanced Security Network Metrics. Emerging Trends in ICT Security. Waltham: Elsevier Science, 2013, pp. 187-202. ISBN 978-0-12-411474-6. Detail
  • HOMOLIAK Ivan, BARABAS Maroš, CHMELAŘ Petr, DROZD Michal and HANÁČEK Petr. ASNM: Advanced Security Network Metrics for Attack Vector Description. In: Proceedings of the 2013 International Conference on Security & Management. Las Vegas: Computer Science Research, Education, and Applications Press, 2013, pp. 350-358. ISBN 1-60132-259-3. Detail
  • BARABAS Maroš, HOMOLIAK Ivan, DROZD Michal and HANÁČEK Petr. Automated Malware Detection Based on Novel Network Behavioral Signatures. International Journal of Engineering and Technology, vol. 5, no. 2, 2013, pp. 249-253. ISSN 1793-8236. Detail
  • ŠVÉDA Miroslav and RYŠAVÝ Ondřej. Dependable Cyber-Physical Systems Networking: An Approach for Real-Time, Software Intensive Systems. In: Programmable Devices and Embedded Systems. Volume #12, vol. 2013. Laxenburg: IFAC, 2013, pp. 1-4. ISBN 978-3-902823-21-2. ISSN 1474-6670. Detail
  • OČENÁŠEK Pavel and ŠVÉDA Miroslav. On the Effective Internet Communication Filtering. Applied Mechanics and Materials, vol. 2013, no. 307, pp. 478-481. ISSN 1660-9336. Detail
  • ŠVÉDA Miroslav. Time in Cyber-Physical Systems: Specifications, Modeling and Measurements. In: Proceedings of the SCSI 2013. Recent Advances in Electrical Engineering Series, 16. Rhodes Island: European Society for Environmental Research and Sustainable Development, 2013, pp. 413-419. ISBN 978-1-61804-204-0. Detail

2012

  • ŠVÉDA Miroslav, SEKLETÁR Michal, FIDLER Tomáš and RYŠAVÝ Ondřej. A High-level Network-wide Router Configuration Language. In: Proceedings ICN 2012. Saint Gilles, Reunion Island: International Academy, Research, and Industry Association, 2012, pp. 18-21. ISBN 978-1-61208-183-0. Detail
  • OČENÁŠEK Pavel and ŠVÉDA Miroslav. Analysis and Filtering of Network Communication in ISP Firewalls. In: Proceedings of the Third International Conference on Theoretical and Mathematical Foundations of Computer Science. Denpasar: Information Engineering Research Institute, 2012, pp. 1-4. Detail
  • OČENÁŠEK Pavel and ŠVÉDA Miroslav. Analysis and Filtering of Network Communication in ISP Firewalls. Lecture Notes in Information Technology, vol. 2012, no. 38, pp. 491-494. ISSN 2070-1918. Detail
  • BARABAS Maroš, DROZD Michal and HANÁČEK Petr. Behavioral signature generation using shadow honeypot. World Academy of Science, Engineering and Technology, vol. 2012, no. 65, pp. 829-833. ISSN 2010-376X. Detail
  • VESELÝ Vladimír and ŠVÉDA Miroslav. L2 protocols in OMNeT++. IP Networking 1 -- Theory and Practice. Žilina: Zilina University Publisher, 2012, pp. 37-40. ISBN 978-80-554-0494-3. Detail
  • CHMELAŘ Petr, ŠEBEK Michal and ZENDULKA Jaroslav. ReTIN: Indexing Schema for Soft Real-Time Data Streams. In: CISSE Conference 2012. Bridgeport, 2012, pp. 1-6. Detail
  • ŠVÉDA Miroslav, RYŠAVÝ Ondřej, DE Silva Gayan, MATOUŠEK Petr and RÁB Jaroslav. Static Analysis of Routing and Firewall Policy Configurations. In: e-Business and Telecommunications. LNCS CCIS, Vol.222, vol. 2012. Heidelberg: Springer Science+Business Media B.V., 2012, pp. 39-53. ISBN 978-3-642-25205-1. ISSN 1865-0929. Detail

2011

  • DROZD Michal, BARABAS Maroš, GRÉGR Matěj and CHMELAŘ Petr. Buffer Overflow Attacks Data Acquisition. In: Proceedings of the 6th IEEE International Conference on IDAACS 2011. Volume 2. Praha: Institute of Electrical and Electronics Engineers, 2011, pp. 775-779. ISBN 978-1-4577-1423-8. Detail
  • ŠVÉDA Miroslav. Design Experience with Routing SW and Related Applications. In: Proceedings of The Tenth International Conference on Networks - ICN 2011. St. Maarten: International Academy, Research, and Industry Association, 2011, pp. 133-138. ISBN 978-1-61208-002-4. Detail
  • ŠVÉDA Miroslav, RYŠAVÝ Ondřej, DE Silva Gayan, MATOUŠEK Petr and RÁB Jaroslav. Reachability Analysis in Dynamically Routed Networks. In: Proceedings of the IEEE ECBS 2011. Piscataway, NJ: IEEE Computer Society, 2011, pp. 197-205. ISBN 978-0-7695-4379-6. Detail
  • ŠVÉDA Miroslav, RYŠAVÝ Ondřej and MATOUŠEK Petr. Supporting Safe and Secure Networked System Design. In: Computer Aided Systems Theory (EUROCAST´11), Extended Abstracts. Las Palmas de Gran Canaria: The Universidad de Las Palmas de Gran Canaria, 2011, pp. 22-23. ISBN 978-84-693-9560-8. Detail

2010

  • ŠVÉDA Miroslav, RYŠAVÝ Ondřej, MATOUŠEK Petr and RÁB Jaroslav. An Approach for Automated Network-Wide Security Analysis. In: Proceedings of the Ninth International Conference on Networks ICN 2010. Les Menuires: IEEE Computer Society, 2010, pp. 294-299. ISBN 978-0-7695-3979-9. Detail
  • ŠVÉDA Miroslav and TRCHALÍK Roman. Development of Interconnecting SW for Intranets and Fieldbuses. IFAC-PapersOnLine, vol. 2010, no. 10, pp. 119-124. ISSN 1474-6670. Detail
  • ŠVÉDA Miroslav. Fault Management Driven Design with Safety and Security Requirements. In: Proceedings 17th IEEE International Conference and Workshops on Engineering of Computer-Based Systems ECBS 2010. Oxford: IEEE Computer Society, 2010, pp. 113-120. ISBN 978-0-7695-4005-4. Detail
  • PIWKO Karel, CHMELAŘ Petr, HERNYCH Radim and KUBÍČEK Daniel. NAXD: Native XML Interface for a Relational Database. In: XML Prague Conference Proceedings. Prague: Charles University, 2010, pp. 307-316. ISBN 978-80-7378-115-6. Detail
  • ŠVÉDA Miroslav. NETWORK CONVERGENCY AND MODELING -- Design Experience with Routing SW for Intranets and Fieldbusses. In: Proceedings of the Fifth International Conference on Software and Data Technologies, ICSOFT 2010. Athens: Institute for Systems and Technologies of Information, Control and Communication, 2010, pp. 173-178. ISBN 978-989-8425-22-5. Detail
  • ŠVÉDA Miroslav, RYŠAVÝ Ondřej, MATOUŠEK Petr, RÁB Jaroslav and ČEJKA Rudolf. SECURITY ANALYSIS OF TCP/IP NETWORKS -- An Approach to Automatic Analysis of Network Security Properties. In: Proceedings of the International Conference on Data Communication Networking ICETE-DCNET 2010. Athens: Institute for Systems and Technologies of Information, Control and Communication, 2010, pp. 5-11. ISBN 978-989-8425-25-6. Detail
  • KORNECKI Andrew J., GREGA Wojciech, HILBURN Thomas B., THIRIET Jean-Marc, ŠVÉDA Miroslav, RYŠAVÝ Ondřej and PILAT Adam. Transatlantic Engineering Programs: An Experience in International Cooperation. Safeeullah Soomro (Editor): Engineering the Computer Science and IT. 2010. Vienna: IN-TECH Education and Publishing, 2010, pp. 65-84. ISBN 978-953-307-012-4. Detail

2009

  • DROZD Michal. Bezpečnost: 1:0 pro malware?. DSM Data Security Management, vol. 13, no. 4, 2009, pp. 16-19. ISSN 1211-8737. Detail
  • ŠVÉDA Miroslav. Fault Management for Secure Embedded Systems. In: International Conference on Systems Proceedings, ICONS 2009. New York, NY: IEEE Computer Society, 2009, pp. 23-28. ISBN 978-0-7695-3551-7. Detail
  • ŠVÉDA Miroslav, KORNECKI Andrew J., HILBURN Thomas B., GREGA Wojciech, THIRIET Jean-Marc and RYŠAVÝ Ondřej. Real-Time Software-Intensive Systems Engineering: An International Perspective. In: European Association for Education in Electrical and Information Engineering Council's Annual Conference 2009. Valencia: Politechnical University of Valencia, 2009, p. 6. ISBN 978-84-8363-428-8. Detail
  • ŠVÉDA Miroslav. Safe and Secure Networked Embedded Applications. In: Proceedings of the 4th International Conference on Broadband Communication. Wroclaw: Institute of Electrical and Electronics Engineers, 2009, p. 6. ISBN 978-83-7493-405-3. Detail
Products

2013

  • High interaction Honeypot with taint analysis, software, 2013
    Authors: Barabas Maroš, Drozd Michal, Homoliak Ivan, Chmelař Petr Detail

2011

  • Linux based Honeypot, software, 2011
    Authors: Mlčoch Tomáš, Chmelař Petr, Richter Jan Detail
Back to top