Mgr. Jakub Růžička

Mgr. Jakub Růžička

Ing. Jan Fesl, Ph.D.

Department of Computer Systems

The aim of this thesis is to utilize virtualization in order to secure an existing solution SharpTest (a system for automated evaluation of programming tasks). Main focus is on secure execution of untrusted code in testing environment and separation and isolation of the system's components. The first part of this thesis introduces problems with execution of untrusted code followed by literature review on virtualization technology. SharpTest is also analyzed with emphasis on the components responsible for untrusted code execution and automated evaluation. In the latter part of this thesis, a solution utilizing hardware virtualization on virtualization platform XCP-ng with hypervisor Xen and it's integration into SharpTest is introduced. Proposed solution is then implemented, integrated and finally tested, with automated tests included as well.

Thesis on DSpace

Mgr. Jakub Růžička

Ing. Jan Chrastina

Department of Software Engineering

The bachelor thesis deals with the development of an administration interface application and its integration into SharpTest - a system for automated assessments of programming tasks. The main goal of this thesis is to analyze, design and implement application that will become an effective tool for administration of mentioned system. Literature review chapter of this thesis aims to establish basic concepts related to three-tier architecture of web applications and to introduce technologies and procedures later used in implementation phase. Following chapters reflect phases of standard Software Development Life Cycle (SDLC). Performed analysis consists of requirements, process and domain analysis. The structure of SharpTest system and all necessary details required for successful integration are also described. In design phase the three-tier architecture is chosen for this application. Data tier is integrated with existing system and the design further deals with the choosing of right technologies for other tiers. Application programming interface and user interface are also designed in this chapter. Implementation details of individual components of the application are explained in the next chapter. Express.js framework on Node.js platform is used for the server-side part of the application and Vue.js framework is used for the client-side. Responsive user interface is made with Bootstrap and BootstrapVue libraries. Last chapter focuses on the testing phase of SDLC including end-user feedback. Created application is production-grade software satisfying all requirements set by the client.

Thesis on DSpace

Mgr. Jakub Růžička

Ing. Josef Kokeš

Department of Software Engineering

The main focus of this bachelor's thesis is design, implementation, and challenge design for a platform that teaches ethical hacking. Interaction with the platform is made more attractive by the use of game design theory, and a strong theme and story for the challenges. Main result of the thesis is the finished education platform, with features that solve the problematic lack of feedback and help in existing solutions. The thesis is concluded by a test run on students of ethical hacking course.

Thesis on DSpace

Mgr. Jakub Růžička

Ing. Jiří Dostál, Ph.D.

Department of Information Security

The theoretical part of this master's thesis consists of a detailed description of security audit records, log management, and SIEM systems, but also how machine learning can be used to analyze records and identify suspicious activity. Moreover, it includes a detailed analysis of GDPR in relation to machine learning and security audit records, as well as a description of the recommendations and regulations associated with this regulation are included. The practical part of this master's thesis designs and implements prototype (script), which is able to detect suspicious activity with the help of machine learning from records created by web proxy servers. Designed and implemented script is tested on real data provided by Cisco System company and is designed to be part of various SIEM systems as a module in the future (after further development). The script outputs include various metrics and charts but mainly a file with detected anomalies. The file can serve as a source of information for security analysts to help them analyze and resolve various security incidents and alerts. The script can also be used as an "automated" filter because the script is able to filter threats from a large number of records that are relevant (might be harmful) and can be used as input to other systems designed to analyze these threats in more detail.

Thesis on DSpace

Mgr. Jakub Růžička

Department of Information Security

This Master's thesis is concerned with security of applications utilizing smart contracts and development of framework for security assessment of such applications. I have mainly focused on the most prominent vulnerabilities in five main components of a typical smart contract application - blockchain, smart contracts, web applications, mobile applications and infrastructure. The practical part is about applying the created framework to the VETRI application, its security analysis and summary of remedies for found vulnerabilities.

Thesis on DSpace