Síťové systémy pro detekci a prevenci proti narušení

Abstract

This bachelor thesis deals about network intrusion detection and prevention systems, which are used for strong security of network traffic. Both systems are described in the introduction, as well as their types and ways, how they are able to detect intrusion. Both these systems represents program called the Snort. Snort can detect intrusion and also actively react on intrusion. Further there are described components of Snort, his running modes and rules. One of the modes is Inline mode which in combination with the program Iptables creates intrusion prevention system. This combination is real tool which allows us actively react on intrusion. Another parts of the text are design of test environment and implementation of intrusion prevention system. The thesis is ended with tests of implemented system by penetration tools.