Sistem za nadzor omrežne varnosti in zaznavanje vdorov

Samardžija, Igor (author), Brodnik, Andrej (mentor)

Diplomska naloga predstavlja razvoj preprostega sistema za zaznavanje in preprečevanje vdorov (IDS/IPS) z uporabo odprtokodnih orodij. Sistem omogoča zaznavanje petih pogostih vrst napadov: TCP SYN, UDP in ICMP poplav, pregledovanja vrat in DNS ojačitve. Ob zaznavi napada sistem zabeleži dogodek, shrani podatke v bazo ter po potrebi samodejno blokira IP naslov napadalca. Naloga prikazuje, kako je mogoče z odprtokodnimi orodji zgraditi delujoč varnostni prototip za izobraževalne in raziskovalne namene.

• Language: Slovenian
• Keywords: IDS, IPS, omrežna varnost, odprtokodna orodja, Python
• Work type: Bachelor thesis/paper
• Typology: 2.11 - Undergraduate Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2026
• PID: 20.500.12556/RUL-180111
• COBISS.SI-ID: 271511299
• Publication date in RUL: 03.03.2026

Secondary language

• Language: English
• Title: Network security monitoring and intrusion detection system

Abstract

This thesis describes the development of a lightweight Intrusion Detection and Prevention System (IDS/IPS) built using open-source tools. The system identifies five common types of attacks—TCP SYN, UDP, and ICMP floods, port scans, and DNS amplification—and logs them to a database while optionally applying automatic IP blocking. The goal was to design an educational and extendable security prototype demonstrating how open technologies can be combined into a functional real-time network defense system.

• Keywords: IDS, IPS, network security, open-source tools, Python