Zařízení pro bezpečnostní analýzu přenášených dat skrze síť Wi-Fi

Abstract

This diploma thesis deals with the design and implementation of a system for security analysis of data transmitted through a Wi-Fi network. The goal was to create a functional and cost-effective solution capable of passively monitoring network traffic of end devices, identifying security threats and visualizing them in real time. The theoretical part provides a survey of security threats in wireless network environments and proposes methods for their detection from network traffic. The practical part describes the implementation of a system built on Zeek IDS running in a container infrastructure on a MikroTik RB5009UPr+S+IN router, with visualization using Grafana. The solution also includes a captive portal informing users about security threats. The system was verified on ten real end devices and demonstrated the ability to identify connected devices, build their DNS fingerprint and detect simulated security threats without a dedicated server using exclusively open-source tools.