Web server scalable and extensible log management platform with Apache attacks detection module

Bc. Peter Hrvola

Bachelor's thesis

Anotácia:

V tejto práci som vyvinul prototyp modulárnej platformy pre analýzu logov z webserverov s dôrazom na rýchlosť. Pre túto platformu bol implementovaný modul pre analýzu útokov na Apache web server. Iniciatívou tejto práce bolo vytvoriť jednoduché, alternatívne, open source riešenie pre vyšetrovanie incidentov a živú detekciu útokov.

Abstract:

In this thesis a highly performant prototype of a modular web server log analysis platform was proposed and developed. A module detecting common attacks on Apache web server was implemented for platform. This thesis was written to provide an easy, alternative, open source solution for incident investigation and continuous log analysis of webserver logs. Testing shows that prototype achieves similar detection rates on access logs as other solutions while being significantly faster and easy to extend.

Keywords

Access logs, Log management, Apache, OWASP TOP 10, Attack detection, Modular system, High performance, Rust

Jazyk práce: English

Datum vytvoření / odevzdání či podání práce: 23. 5. 2018

Obhajoba závěrečné práce

• Obhajoba proběhla 26. 6. 2018
• Vedúci: RNDr. Radim Ošťádal
• Oponent: Ing. Mgr. et Mgr. Zdeněk Říha, Ph.D.

Masaryk University

Faculty of Informatics

Bachelor programme / odbor:
Informatics / Computer Systems and Data Processing