Príspevok k systematickému zabezpečeniu IaaS cloudu na katedre KIS

The main aim of this diploma thesis is contribute to the systematic security of IaaS cloud at the department of Information Networks by commercial next generation firewall Fortinet FortiGate. In terms of security, it is necessary to monitor user activities within KIS, monitor malicious activities and anomaly detection in network flows, introducing processes and appropriate tools to respond to these security breaches. This thesis contain a configuration and evaluation result effect for the network at the department of Information Networks. Datasets of attacks are also subject of investigation and analysis through the FortiGate firewall. Datasets contain a diverse and up-to-date range of protocols used today as well as a diverse range of different types of attacks which play an important role in testing the efficiency of IDS tools.At the department of Information Networks was created admin portal for managing users VM in IaaS cloud. Secondary goal is testing this tool and future usability assessment and analyzing the options for extending it to traffic filtering and security intrusion detection for those streams that a firewall or other security feature would allow to be legitimate, but which may also contain attacks if the attackers are able to exploit these otherwise legitimate protocols.