prikaz prve stranice dokumenta Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta
  Download
PDF 3.09 MB
master's thesis
Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta
2019. urn:nbn:hr:200:585728
Žagar, Filip
Josip Juraj Strossmayer University of Osijek
Faculty of Electrical Engineering, Computer Science and Information Technology Osijek
Department of Communications
Chair of Radiocommunications and Telecommunications

Cite this document

Žagar, F. (2019). Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta (Master's thesis). Retrieved from https://urn.nsk.hr/urn:nbn:hr:200:585728

Žagar, Filip. "Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta." Master's thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, 2019. https://urn.nsk.hr/urn:nbn:hr:200:585728

Žagar, Filip. "Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta." Master's thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, 2019. https://urn.nsk.hr/urn:nbn:hr:200:585728

Žagar, F. (2019). 'Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta', Master's thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, accessed 24 May 2022, https://urn.nsk.hr/urn:nbn:hr:200:585728

Žagar F. Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta [Master's thesis]. Osijek: Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek; 2019 [cited 2022 May 24] Available at: https://urn.nsk.hr/urn:nbn:hr:200:585728

F. Žagar, "Postupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta", Master's thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, Osijek, 2019. Available at: https://urn.nsk.hr/urn:nbn:hr:200:585728

Please login to the repository to save this object to your list.
Metadata
TitlePostupak mrežnog sigurnosnog testiranja i oporavak nakon incidenta
Title (english)Network Security Testing and Incident Response
AuthorFilip Žagar
MentorKrešimir Grgić (mentor)
Committee memberKrešimir Grgić (predsjednik povjerenstva)
Committee memberVišnja Križanović (član povjerenstva)
Committee memberAnđelko Lišnjić (član povjerenstva)
GranterJosip Juraj Strossmayer University of Osijek
Faculty of Electrical Engineering, Computer Science and Information Technology Osijek
(Department of Communications)
(Chair of Radiocommunications and Telecommunications)
Osijek
Defense date and country2019-09-24, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Electrical Engineering
Telecommunications and Informatics
Abstract
U radu je izvršena detekcija događaja u mreži korištenjem Snort i Bro IDS – ova i raznih vizualizacija i obrada podataka dobivenih Packetbeat, Kibana, Sguil te NetworkMiner programskim alatima. Podaci su spremljeni u Elasticsearch bazu podataka i vizualizirani pomoću Kibana sučelja. Analizirano je šest različitih napada: XSS napad, napad infiltracijom preuzimanjem malicioznog dokumenta, Slowloris napad, napad ARES botnet-om, koji su generirani unutar CICIDS2017 kolekcije podataka i volumetrički DoS napad te napad otkrivanja lozinke rječnikom, generirani u vlastitoj lokalnoj mreži. Nakon detekcije i analize predložene su smjernice koje je potrebno slijediti za zaustavljanje i daljnju prevenciju napada.
Abstract (english)
In this thesis network security monitoring was performed using Snort and Bro IDS, different visualizations and data processing using Packetbeat, Kibana, NetworkMiner, Wireshark and Sguil software. Data was stored in an Elasticsearch database and visualized or processed with Kibana interface. Six different attacks were analysed: XSS attack, Infiltration attack using malicious document, Slowloris attack, ARES botnet attack – which were generated in CICIDS2017 dataset, volumetric DoS attack and password cracking dictionary attack – which were generated in my own local network. After detection and analysis, policies and suggestion for further prevention and mitigation of the same attack were given.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:200:585728
Study programmeTitle: Graduate University Study Programme in Electrical Engineering; specializations in: Communications and Informatics, Power Engineering
Course: Communications and Informatics
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka elektrotehnike (magistar/magistra inženjer/inženjerka elektrotehnike)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2019-12-23 11:58:30