NES@FIT - Networks and distributed systems research group
NES@FIT - Networks and distributed systems research group
The focus of the research group is on communication, architecture, and monitoring of computer networks, the design of simulation and verification tools, network security and digital forensics.
Research interests
- Use of LLM Models for Network Monitoring and Management (MAESTRO project, Spojit project)
- Security Threat Detection and Network Monitoring (PREACT project, INVENTOR project)
- Analysis and Classification of Encrypted Traffic (FETA project, ETA project)
- Analytical Tools for Image and Video Processing (FACIS project)
- Tools for Network Forensic Analysis (Netfox project, Tarzan project)
- Monitoring and Security of the Internet of Things (Ironstone project, IGA project)
- Security of Communication in Industrial Networks (Bonnet project, Tractor project)
- QKD - Quantum Key Distribution
Cooperation
- Université Grenoble Alpes, Grenoble, France
- University of New Haven, New Haven, USA
- Linköping University, Linköping, Sweden
- University Strathmore, Nairobi, Kenya
- Kenyatta University, Nairobi, Keňa
- Deggendorf Institute of Technology, Deggendorf, Německo
- Universidad de Buenos Aires, Buenos Aires, Argentina
- National Taiwan University of Science and Technology, Taipei, Tchaj-wan
- Flowmon Networks, Brno, Czech Republic
- Netsearch, Brno, Czech Republic
- NetX, Brno, Czech Republic
- CESNET, Czech Republic
- Free Software Foundation, Boston, USA
Links
- Network Forensics Tool NetFox Detective, see http://netfox.fit.vutbr.cz
- Password Recovery Tool Wrathion, see http://fitcrack.fit.vutbr.cz/.
- IPv6 monitoring and security, see http://6lab.cz/
- ANSAINET project: network modeling and simulation in OMNeT++, see https://ansa.omnetpp.org/
- RINASim project: Recursive InterNetwork Architecture (RINA) Simulator, see https://rinasim.omnetpp.org/
- JShelter Project: Enhancing the Security and Privacy of Web Browsers, see https://jshelter.org/
Student projects
Within the research group, students can work on bachelor's and master's thesis projects based on the current research activities of the NES group. The current areas include:
Internet Security and Network Forensic Analysis
Digital Forensic Analysis
- Detection of Phishing Websites Using Machine Learning Methods (Bachelor’s/Master’s Thesis, Radek Hranický)
- Detection of Malware Domains Using Machine Learning Methods (Bachelor’s/Master’s Thesis, Radek Hranický)
- Research into New Methods for Gaining Access to Seized Devices (Bachelor’s/Master’s Thesis, Vladimír Veselý)
- Encryption and Decryption of Data from Seized Devices (Bachelor’s/Master’s Thesis, Vladimír Veselý)
- Tools Supporting the Analysis and Extraction of Large Volumes of Unstructured Data (Bachelor’s/Master’s Thesis, Vladimír Veselý)
- Dark Web Mapping (Bachelor’s/Master’s Thesis, Vladimír Veselý)
- Development of Hardware and Software for Detection of Active Drones (Bachelor’s/Master’s Thesis, Vladimír Veselý)
- Forensic Correlation of DNS, TLS, and HTTP Artifacts in Security Incident Analysis (Bachelor’s/Master’s Thesis, Jan Pluskal)
- Threat Intelligence Collection from Unstructured OSINT Data (Bachelor’s/Master’s Thesis, Ondřej Ryšavý)
- Generation of Advanced Datasets Using LLM Agents (Bachelor’s/Master’s Thesis, Ondřej Ryšavý)
- Generation of Vulnerabilities for Honeypots Using LLMs (Bachelor’s/Master’s Thesis, Ondřej Ryšavý)
- Comparison of Deep Learning Approaches for Network Application Identification (Master’s Thesis, Ondřej Ryšavý)
Web Applications
- Development of JShelter extensions (DP/DP, Libor Polčák)
- Web crawling and statistical analysis (used APIs, advertising, tracking, etc.) (BP/DP, Libor Polčák)
- Security risks of sensors in mobile devices (BP, Radek Hranický)
- Simulation of mobile device movement in a human hand (DP, Radek Hranický)
- Simulation of human web browsing behavior (BP/DP, Radek Hranický)
- Generation of anomalous web traffic (DP, Radek Hranický)
- Detection of unwanted web requests (BP/DP, Radek Hranický)
- Web browser for large datasets managed in git-annex (BP/DP, Marek Rychlý)
Cryptocurrencies and Blockchain Applications
- Use of Network Intelligence for deanonymization of cryptocurrency users (DP, Vladimír Veselý)
- Deanonymization of transactions in decentralized exchanges (BP/DP, Vladimír Veselý)
- Implementation of a smart contract security analysis tool (BP/DP, Vladimír Veselý)
Mobile Communications
- Matrix Application Service for Communication via XMPP (Bachelor’s/Master’s Thesis, Marek Rychlý)
- Matrix Protocol Bridge for Voice Calls over SIP (Bachelor’s/Master’s Thesis, Marek Rychlý)
- Extension of the Locus Map Application for Battlefield Unit Communication (Bachelor’s Thesis, Radek Hranický)
- Mobile Application for Battlefield Unit Coordination (Master’s Thesis, Radek Hranický)
Internet of Things
- Risk analysis of sensor networks, IoT, and remote energy metering (BP/DP, Libor Polčák)
- Control of LEGO Technic active elements from EV3 environment (BP, Radek Hranický)
- Control of LEGO Powered-Up Hub from EV3 environment (BP, Radek Hranický)
- Detection of anomalies and forensic collection of artifacts from MQTT and Matter protocols in smart homes (BP/DP, Jan Pluskal)
- Detection of anomalous IoT communication in smart homes (BP/DP, Jan Pluskal)
Industrial Networks, SCADA Systems
- Detection of Attacks in IEC 104 Communication in Smart Power Grids (Master’s Thesis, Petr Matoušek)
- Anomaly Detection in CIP (Common Industrial Protocol) Communication (Bachelor’s/Master’s Thesis, Petr Matoušek)
- Application of Neural Networks for Anomaly Detection in ICS Communication (Master’s Thesis, Petr Matoušek)
- Anonymization of Communication in Industrial Networks (Bachelor’s/Master’s Thesis, Petr Matoušek)
- Application for Statistical Analysis of ICS Communication (Bachelor’s Thesis, Ivana Burgetová)
- Detection of Periodicity in ICS Communication (Bachelor’s Thesis, Ivana Burgetová)
Design, Simulation and Modelling of Networks, P2P Networks
- Simulation Models in the Bitcoin Ecosystem (Master’s Thesis, Vladimír Veselý)
- Simulation Models in the Ethereum Ecosystem (Master’s Thesis, Vladimír Veselý)
Network Monitoring and Management
- Generation of Network Configurations Using Large Language Models (LLMs) (Bachelor’s/Master’s Thesis, Petr Matoušek)
- Analysis of Methods for Outlier Detection (Bachelor’s/Master’s Thesis, Ivana Burgetová)
- Prometheus Exporter for Network Devices (Bachelor’s Thesis, Matěj Grégr)
- API for Processing NetFlow Data in Go (Master’s Thesis, Matěj Grégr)
- Management and Security of Communications Using QKD (Bachelor’s/Master’s Thesis, Ondřej Ryšavý)
Operating Systems
- Port Block Allocation for Address Translation in iptables (Master’s Thesis, Matěj Grégr)
- Detection of DDoS Attack Patterns in NetFlow Data (Bachelor’s/Master’s Thesis, Matěj Grégr)
- Stateless NAT for the Linux Kernel (Master’s Thesis, Matěj Grégr)
- Atomic Operating System Updates (Bachelor’s Thesis, Matěj Grégr)
- Analysis of Computer User Activities Using Federated Learning (Bachelor’s/Master’s Thesis, Marek Rychlý)
- Sandbox Environment for Application Control Using LLM Agents (Bachelor’s/Master’s Thesis, Ondřej Ryšavý)
Industrial Thesis Topics
- Optimization of Software Development Using Multi-Agent Large Language Models (LLMs), AT&T (Master’s Thesis, Petr Matoušek)
- Optimization of Software Development and Deployment Using Multi-Agent Large Language Model (LLM) Systems, AT&T (Master’s Thesis, Petr Matoušek)
The above BT and MT topics are announced for the academic year 2026/2027.
Further information on the topics will be provided by the topic leader, who is listed in brackets. If a topic is listed as a BT/MT type, this means that it can be written as a Bachelor's thesis (simplified assignment) or a Master's thesis (extended version).
Those interested in topics should contact the topic leader, who will enter the selected assignment into the BUT IS.
Last update 25 May 2026.
Contact
Doc. Ing. Ondřej Ryšavý, PhD., phone. +420-54114 1108, e-mail: rysavy@fit.vutbr.cz