NES@FIT - Networks and distributed systems research group
NES@FIT - Networks and distributed systems research group
The focus of the research group is on communication, architecture, and monitoring of computer networks, the design of simulation and verification tools, network security and digital forensics.
Research interests
- Analysis and Classification of Encrypted Traffic
- Analytical Tools for Image and Video Processing (FACIS project)
- Tools for Network Forensic Analysis (Netfox project, Tarzan project)
- Monitoring and Security of the Internet of Things (Ironstone project, IGA project)
- Security of Communication in Industrial Networks (Bonnet project, Tractor project)
- QKD - Quantum Key Distribution
Cooperation
- Université Grenoble Alpes, Grenoble, France
- University of New Haven, New Haven, USA
- Linköping University, Linköping, Sweden
- University Strathmore, Nairobi, Kenya
- Universidad de Buenos Aires, Buenos Aires, Argentina
- NTUST, Tchaj-wan
- Flowmon Networks, Brno, Czech Republic
- Netsearch, Brno, Czech Republic
- NetX, Brno, Czech Republic
- CESNET, Czech Republic
- Free Software Foundation, Boston, USA
Links
- Network Forensics Tool NetFox Detective, see http://netfox.fit.vutbr.cz
- Password Recovery Tool Wrathion, see http://fitcrack.fit.vutbr.cz/.
- IPv6 monitoring and security, see http://6lab.cz/
- ANSAINET project: network modeling and simulation in OMNeT++, see https://ansa.omnetpp.org/
- RINASim project: Recursive InterNetwork Architecture (RINA) Simulator, see https://rinasim.omnetpp.org/
- JShelter Project: Enhancing the Security and Privacy of Web Browsers, see https://jshelter.org/
Student projects
Within the research group, students can work on bachelor's and master's thesis projects based on the current research activities of the NES group. The current areas include:
Internet Security and Network Forensic Analysis
- Using node reputation for detecting cyber threats in networks (DP, Petr Matoušek)
- Detection of phishing websites using machine learning methods (BP/DP, Radek Hranický)
- Detection of malware domains using machine learning methods (BP/DP, Radek Hranický)
- Research of new methods for gaining access to seized devices (BP/DP, Vladimír Veselý)
- Encryption and decryption of data from seized devices (BP/DP, Vladimír Veselý)
- Tools for analysis and extraction of large volumes of unstructured data (BP/DP, Vladimír Veselý)
- Dark web mapping (BP/DP, Vladimír Veselý)
- Development of hardware/software for detecting active drones (BP/DP, Vladimír Veselý)
- Forensic correlation of DNS, TLS, and HTTP artifacts in security incident analysis (BP/DP, Jan Pluskal)
- Collection of threat intelligence from unstructured OSINT data (BP/DP, Ondřej Ryšavý)
- Creation of advanced datasets using LLM agents (BP/DP, Ondřej Ryšavý)
- Generation of vulnerabilities for honeypots using LLM (BP/DP, Ondřej Ryšavý)
- Comparison of deep learning approaches for network application identification (DP, Ondřej Ryšavý)
Digital Forensic Analysis
- Password cracking using GPU-based Rainbow Tables (BP/DP, Radek Hranický)
- Automated planning of password attacks (BP, Radek Hranický)
- Automated generation of password modification rules using machine learning (BP/DP, Radek Hranický)
- Optimization of computationally intensive tasks in the Fitcrack system (DP, Radek Hranický)
- Extension of the DiStReX tool with support for additional forensic formats (BP/DP, Jan Pluskal)
- Adaptive distributed system for password recovery with low scheduling overhead (DP, Jan Pluskal)
Web Applications
- Development of JShelter extensions (DP/DP, Libor Polčák)
- Web crawling and statistical analysis (used APIs, advertising, tracking, etc.) (BP/DP, Libor Polčák)
- Security risks of sensors in mobile devices (BP, Radek Hranický)
- Simulation of mobile device movement in a human hand (DP, Radek Hranický)
- Simulation of human web browsing behavior (BP/DP, Radek Hranický)
- Generation of anomalous web traffic (DP, Radek Hranický)
- Detection of unwanted web requests (BP/DP, Radek Hranický)
- Web browser for large datasets managed in git-annex (BP/DP, Marek Rychlý)
Cryptocurrencies and Blockchain Applications
- Use of Network Intelligence for deanonymization of cryptocurrency users (DP, Vladimír Veselý)
- Deanonymization of transactions in decentralized exchanges (BP/DP, Vladimír Veselý)
- Implementation of a smart contract security analysis tool (BP/DP, Vladimír Veselý)
Mobile Communications
- Automated fingerprinting of mobile applications (BP, Petr Matoušek)
- Detection of malware in TLS communication (DP, Petr Matoušek)
- Matrix-based application service for communication via XMPP (BP/DP, Marek Rychlý)
- Matrix protocol bridge for voice calls over SIP (BP/DP, Marek Rychlý)
- Extension of the Locus Map application for battlefield unit communication (BP, Radek Hranický)
- Mobile application for coordination of battlefield units (DP, Radek Hranický)
Internet of Things
- Risk analysis of sensor networks, IoT, and remote energy metering (BP/DP, Libor Polčák)
- Control of LEGO Technic active elements from EV3 environment (BP, Radek Hranický)
- Control of LEGO Powered-Up Hub from EV3 environment (BP, Radek Hranický)
- Detection of anomalies and forensic collection of artifacts from MQTT and Matter protocols in smart homes (BP/DP, Jan Pluskal)
- Detection of anomalous IoT communication in smart homes (BP/DP, Jan Pluskal)
Industrial Networks, SCADA Systems
- Detection of attacks in IEC 104 communication in smart grids (DP, Petr Matoušek)
- Detection of anomalies in industrial CIP (Control Industrial Protocol) communication (BP/DP, Petr Matoušek)
- Use of neural networks for anomaly detection in ICS communication (DP, Petr Matoušek)
- Anonymization of communication in industrial networks (BP/DP, Petr Matoušek)
- Application for statistical analysis of ICS communication (BP, Ivana Burgetová)
- Detection of periodicity in ICS communication (BP, Ivana Burgetová)
The above BT and MT topics are announced for the academic year 2026/2027.
Further information on the topics will be provided by the topic leader, who is listed in brackets. If a topic is listed as a BT/MT type, this means that it can be written as a Bachelor's thesis (simplified assignment) or a Master's thesis (extended version).
Those interested in topics should contact the topic leader, who will enter the selected assignment into the BUT IS.
Last update 25 May 2026.
Contact
Doc. Ing. Ondřej Ryšavý, PhD., phone. +420-54114 1108, e-mail: rysavy@fit.vutbr.cz