The Master´s thesis „Traffic management in wireless networks“ discusses how to ensure Quality of Service in these networks. A term „traffic management“ is connected mainly with certain restrictions and prioritization of some services and traffics in network. The thesis contains an overview of the most used wireless technologies and describes the approach of these technologies to ensure QoS. Theoretical part of the thesis follows with the definition of general principles of traffic management in IP networks and provides an overview of network parameters used in evaluating the quality of different types of communications services. Practical part is focused on the most widely used wireless technology of standard 802.11 and also on implementation of remote administration system on a small SOHO routers. These systems allow the use of queueing disciplines to manage QoS. Designed and implemented HTB discipline is tested on a real traffic network model.

This project is concerned with the security of Wi-Fi network. It defines security and introduces the principles of some security systems which are consequently instructed for its breakthrough, out of which follows the nature of security failures. The main emphasis is put on the current security issue of Wi-Fi Protected Setup (WPS) technology. Consequently, it is concerned with the putting into service of this technology in GNU/Linux distribution OpenWrt on Wi-Fi router TP-LINK TL-WR1043ND. The project is concluded with the suggestions for the correction of the security failure.

Submitted by LAÍS MONIQUE MENDES SALLES (laismoniquems@gmail.com) on 2018-05-29T14:47:15Z No. of bitstreams: 1 Dissertação_Laís_Salles.pdf: 3116151 bytes, checksum: a926dc1c26c90b48c73a7ebf5d913a93 (MD5) / Approved for entry into archive by Cristina Alexandra de Godoy null (cristina@adm.feis.unesp.br) on 2018-06-04T11:58:55Z (GMT) No. of bitstreams: 1 salles_lmm_me_ilha.pdf: 3116151 bytes, checksum: a926dc1c26c90b48c73a7ebf5d913a93 (MD5) / Made available in DSpace on 2018-06-04T11:58:55Z (GMT). No. of bitstreams: 1 salles_lmm_me_ilha.pdf: 3116151 bytes, checksum: a926dc1c26c90b48c73a7ebf5d913a93 (MD5) Previous issue date: 2017-08-31 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES) / O presente trabalho tem como proposta o desenvolvimento de um dispositivo de medição de ruído utilizando componentes e dispositivos eletroeletrônicos de baixo custo para uso no monitoramento de ruído em ambientes de trabalho. No desenvolvimento e implementação do sistema de medição foram estudas duas proposta de dispositivos, uma com base na plataforma Arduino e outra com base no sistema OpenWrt em conjunto com um roteador. Os circuitos de captação do ruído foram desenvolvidos com base em circuitos de captação de sinais já existentes, identificando o que melhor se adaptou a proposta. O sistema de medição contempla ainda a proposta de operação remota, por meio da telemetria, de forma que o operador possa controlar as medições sem estar no local. Para isso, foi utilizado um módulo Wireless no Arduino e o próprio roteador usado sistema OpenWrt. Os dispositivos de medição propostos podem ser usados tanto para o monitoramento do ruído, como para o registro dos níveis de ruído de forma continua ou em intervalos de tempo predefinidos, possibilitando assim, a obtenção do histórico do ambiente. Para avaliação de desempenho dos dispositivos foi utilizado um sistema de medição de ruído comercial e as especificações e requisitos de normas técnicas. Os resultados mostraram que o dispositivo implementado com base no sistema OpenWrt apresentou um melhor desempenho, principalmente, em relação sua taxa de amostragem que é maior, não necessitando ajustes e a busca de soluções para aumentar da taxa de amostragem verificados no Arduino. / The present work proposes the development of a noise measurement device, using components and electronic devices of low cost for use in the monitoring of noise in work environments. In the implementation of the measuring system were studied two proposals of devices one based on the platform Arduino and another based on the OpenWrt system together with a router. The noise pickup circuits were developed based on existing signal pickup circuits, identifying what best suited the proposal. The measurement system also contemplates the proposal of remote operation, by telemetry, so that the operator can control the measurements without being in place. For this, a wireless module was used in the Arduino and the router itself in the OpenWrt system. The proposed devices can be used both for noise monitoring and recording of noise levels continuously or at predefined time intervals, thus enabling the achievement of environmental history. For performance evaluation of the devices a commercial noise measurement system was used and the specifications and requirements of technical standards. The results showed that the system implemented based on the OpenWrt system presented a better performance, mainly in relation to its sampling rate that is higher, requiring no adjustments and the search for solutions to increase the sampling rate verified in the Arduino.

Orientador: João Antônio Perreira / Resumo: O presente trabalho tem como proposta o desenvolvimento de um dispositivo de medição de ruído utilizando componentes e dispositivos eletroeletrônicos de baixo custo para uso no monitoramento de ruído em ambientes de trabalho. No desenvolvimento e implementação do sistema de medição foram estudas duas proposta de dispositivos, uma com base na plataforma Arduino e outra com base no sistema OpenWrt em conjunto com um roteador. Os circuitos de captação do ruído foram desenvolvidos com base em circuitos de captação de sinais já existentes, identificando o que melhor se adaptou a proposta. O sistema de medição contempla ainda a proposta de operação remota, por meio da telemetria, de forma que o operador possa controlar as medições sem estar no local. Para isso, foi utilizado um módulo Wireless no Arduino e o próprio roteador usado sistema OpenWrt. Os dispositivos de medição propostos podem ser usados tanto para o monitoramento do ruído, como para o registro dos níveis de ruído de forma continua ou em intervalos de tempo predefinidos, possibilitando assim, a obtenção do histórico do ambiente. Para avaliação de desempenho dos dispositivos foi utilizado um sistema de medição de ruído comercial e as especificações e requisitos de normas técnicas. Os resultados mostraram que o dispositivo implementado com base no sistema OpenWrt apresentou um melhor desempenho, principalmente, em relação sua taxa de amostragem que é maior, não necessitando ajustes e a busca de soluções para aumentar da ... (Resumo completo, clicar acesso eletrônico abaixo) / Abstract: The present work proposes the development of a noise measurement device, using components and electronic devices of low cost for use in the monitoring of noise in work environments. In the implementation of the measuring system were studied two proposals of devices one based on the platform Arduino and another based on the OpenWrt system together with a router. The noise pickup circuits were developed based on existing signal pickup circuits, identifying what best suited the proposal. The measurement system also contemplates the proposal of remote operation, by telemetry, so that the operator can control the measurements without being in place. For this, a wireless module was used in the Arduino and the router itself in the OpenWrt system. The proposed devices can be used both for noise monitoring and recording of noise levels continuously or at predefined time intervals, thus enabling the achievement of environmental history. For performance evaluation of the devices a commercial noise measurement system was used and the specifications and requirements of technical standards. The results showed that the system implemented based on the OpenWrt system presented a better performance, mainly in relation to its sampling rate that is higher, requiring no adjustments and the search for solutions to increase the sampling rate verified in the Arduino. / Mestre

This thesis explores the possibilities of implementation of methods for data acquisition in wireless access point MikroTik while using virtualized OpenWRT system. First part of the paper contains short introduction into device’s features and extention of the features by virtualizing the operation system. Design and implementation of the scripts for average load of interfaces data acquisition is in the second part of the paper. The next part deals with the transmission of the gathered data and implementation of the proposed programs in C language. The last part of the paper covers the implementation of a complete program to collect, send and receive data with the option of parameters configuration, and automatic acquisition of the configuration.

The diploma thesis deals with the system OpenWRT. Installing this system on the router Siemens Gigaset SX762. Describes how to compile and upload the simple package helloworld into this system. The package was tasked invitation simple phrase "Hello World" to the system console of OpenWRT. Package only serve to show that the system OpenWRT allows users to customize it according to their needs. After that it was installed PBX Asterisk into the system OpenWRT. Proper functioning of PBX Asterisk has been verified to make a call between two software phones ZoiPer. Furthermore, the work described telephony application programming interface (TAPI). Some of its fun- ctions, interfaces and packages needed to communicate with the system OpenWRT. In conclusion, the presented test topology and verify the operation of making calls between analog as well as softphones.

When using a wireless repeater in a network, an overlap zone between the repeater and the primary access point that holds the internet connection is created. The theoretical throughput for connections through the repeater is reduced by half since the repeater can’t send and receive data at the same time when using only one channel which was the case in this thesis. To solve the problem with the overlap zone, an algorithm that runs in the form of a bash script on two openWRT-based access points where one acts as a repeater and the other one is a gateway with an internet connection was developed. The script uses the signal strength value (RSSI) to decide whether a wireless device is located within the overlap zone by comparing the measured value against a set threshold where the gateway still delivers higher throughput than the repeater. Wireless devices in the overlap zone are blocked on the repeater and will then connect to the gateway instead. Wireless devices that are located outside the overlap zone will connect to the access point that yields the strongest signal strength. The throughput to the gateway was measured at several locations with different signal strengths to both the gateway and the repeater. Wireless devices within the overlap zone that were connected to the repeater before the script was run gained a higher throughput after the script was run and made it connect directly to the gateway instead. / Vid användning av en trådlös repeater i ett nätverk skapas en överlappningszon mellan repeatern och den primära anslutningspunkten som har uppkopplingen mot internet. Den möjliga datagenomströmningshastigheten för uppkopplingar via repeatern halveras eftersom repeatern inte kan sända och ta emot samtidigt på samma kanal. För detta examensarbete fanns inte möjligheten att använda fler kanaler. För att lösa problemet med överlappningszonen utvecklades en algoritm som körs i form av ett bash-skript på två openWRT-baserade anslutningspunkter där den ena agerar som repeater och den andra är en gateway med internetuppkoppling. Skriptet använder värdet på signalstyrka (RSSI) för att avgöra om en trådlös enhet befinner sig i överlappningszonen genom att kontrollera uppmätt värde mot ett tröskelvärde där gatewayen fortfarande ger högre datagenomströmningshastighet än repeatern. Trådlösa enheter i överlappningszonen blockeras på repeatern och kopplar då upp till gatewayen istället. Utanför överlappningszonen kopplas enheter upp till den anslutningspunkt som har starkast signalstyrka. Datagenomströmningen till gatewayen mättes på flera platser med olika signalstyrkor till både gatewayen och repeatern. Trådlösa enheter i överlappningszonen som var uppkopplade till repeatern innan skriptet kördes fick en högre datagenomströmningshastighet efter att skriptet kört och styrt om anslutningen direkt till gatewayen istället.

DDoS-Angriffe und die für diese genutzten Botnetze werden u. a. durch die zunehmende Verbreitung von IoT-Geräten stetig größer. Aufgrund der Vorteile einer frühzeitigen Unterbindung solcher Angriffe ist eine effektive Erkennung der DDoS-Teilnahme in Heimroutern sinnvoll. Diese Arbeit analysiert aktuell verbreitete DDoS-Angriffstypen und entwickelt sowie sammelt verschiedene Erkennungsmechanismen aus der Literatur. Mithilfe ausführlicher Untersuchungen und Tests bezüglich Filterverhalten und Ressourcenbedarf der Erkennungsmechanismen konnten DDoS-Angriffstypen identifiziert werden, welche effektiv im Heimrouter erkannt und unterbunden werden können.:1 Einleitung 1.1 Problemstellung 1.2 Zielstellung 2 Verbreitetste DDoS-Angriffstypen 2.1 Source IP Spoofing 2.2 Reflection/Amplification 2.2.1 SSDP 2.2.2 WS Discovery 2.2.3 QUIC-Reflection 2.3 TCP-Floods 2.3.1 SYN-Flood 2.3.2 RST- und FIN-Flood 2.3.3 SYN-ACK-Flood 2.3.4 ACK-Flood 2.4 UDP-Flood 2.5 Direkte Application-Layer-Angriffe 2.6 Übersicht 3 Erkennung 3.1 Source IP Spoofing 3.2 SSDP & WS Discovery 3.3 TCP 3.3.1 SYN-Flood 3.3.2 RST- und FIN-Flood 3.3.3 SYN-ACK-Flood 3.3.4 ACK-Flood 3.4 UDP 3.5 Allgemeine Erkennung 3.5.1 MULTOPS 3.5.2 TOPS 3.5.3 D-WARD 4 Implementierung 4.1 Source IP Spoofing 4.2 SSDP & WS Discovery 4.3 TCP (ohne SYN) 4.4 SYN-Flood 4.4.1 SYN Paketratenlimitierung 4.4.2 SYN Proxy 5 Untersuchung 5.1 Tests 5.1.1 Implementierungskomplexität 5.1.2 Speicher- und Rechenkapazitätsbedarf 5.1.3 Filterverhalten 5.2 Andere Erkennungsmethoden 5.2.1 Implementierungskomplexität 5.2.2 Speicher- und Rechenkapazitätsbedarf 5.2.3 Filterverhalten 5.3 Diskussion 6 Fazit & Ausblick Literaturverzeichnis Abbildungsverzeichnis Tabellenverzeichnis / DDoS attacks and the botnets used for them are constantly growing due to the increasing spread of IoT devices, among other things. Due to the advantages of stopping such attacks at an early stage, effective detection of DDoS participation in home routers makes sense. This thesis analyses currently widespread DDoS attack types and develops and collects various detection mechanisms from the literature. With the help of detailed investigations and tests regarding filter behaviour and resource requirements of the detections mechanisms, DDoS attack types were identified that can be effectively detected and prevented in the home router.:1 Einleitung 1.1 Problemstellung 1.2 Zielstellung 2 Verbreitetste DDoS-Angriffstypen 2.1 Source IP Spoofing 2.2 Reflection/Amplification 2.2.1 SSDP 2.2.2 WS Discovery 2.2.3 QUIC-Reflection 2.3 TCP-Floods 2.3.1 SYN-Flood 2.3.2 RST- und FIN-Flood 2.3.3 SYN-ACK-Flood 2.3.4 ACK-Flood 2.4 UDP-Flood 2.5 Direkte Application-Layer-Angriffe 2.6 Übersicht 3 Erkennung 3.1 Source IP Spoofing 3.2 SSDP & WS Discovery 3.3 TCP 3.3.1 SYN-Flood 3.3.2 RST- und FIN-Flood 3.3.3 SYN-ACK-Flood 3.3.4 ACK-Flood 3.4 UDP 3.5 Allgemeine Erkennung 3.5.1 MULTOPS 3.5.2 TOPS 3.5.3 D-WARD 4 Implementierung 4.1 Source IP Spoofing 4.2 SSDP & WS Discovery 4.3 TCP (ohne SYN) 4.4 SYN-Flood 4.4.1 SYN Paketratenlimitierung 4.4.2 SYN Proxy 5 Untersuchung 5.1 Tests 5.1.1 Implementierungskomplexität 5.1.2 Speicher- und Rechenkapazitätsbedarf 5.1.3 Filterverhalten 5.2 Andere Erkennungsmethoden 5.2.1 Implementierungskomplexität 5.2.2 Speicher- und Rechenkapazitätsbedarf 5.2.3 Filterverhalten 5.3 Diskussion 6 Fazit & Ausblick Literaturverzeichnis Abbildungsverzeichnis Tabellenverzeichnis

The aim of this thesis was to create a web application used for centralized management and configuration of wireless networks on access points running on OpenWrt distribution. The reader is acquainted with common principles of wireless networks including description of existing solutions for their centralized management. After that the thesis introduces the reader to OpenWrt distribution and to a method of its configuration using UCI model. The reader is then introduced to the main technologies used in this thesis. Author further describes architecture, user interface and implementation of the web application. The created web application is platform agnostic and provides easy way to manage and configure access points with OpenWrt distribution.

This master's thesis is primarily focused on the design of an electronic access control system using the BodyCom technology. The first section describes the working principle of this technology and its influence on human body. The second section shows an application of this technology in construction options of the electronic access control system.