Analysis of Attacks on Mail Service Infrastructure Based on Application Logs and NetFlow Protocol

This work deals with the analysis of application logs from mail servers as well as the analysis of data flows obtained using the NetFlow protocol. In the introduction the work looks into the basic theoretical background which includes basic attacks on the infrastructure of mail services. The work creates a mechanism for data collection, analysis, filtering and evaluation. The conclusion describes the results and findings based on the analyses. The work in the last chapter summarizes the findings and lists other possible steps and improvements.