Vyhledávání síťových anomálií pomocí síťových toků a systémových informací

Abstract

This master thesis is about creation of monitoring system for searching network anomalies based on network traffic and system information obtained from different devices. Created system is based on open-source tool RRDtool and on SNMP protocol. For visualization of results was used web server. RRDtool serves for saving time-dependent data and it has also implemented Holt-Winters method for prediction of evolution of time series. I used scripting language Perl for working with this tool. Scripts, which I’ve made, form the core of entire monitoring system for anomaly detection. Created system belongs to IDS category. Functionality of designed system was tested in GNS3 software, in laboratory of computer networks and on device, which was connected directly to internet.