prikaz prve stranice dokumenta Analiza sigurnosti operacijskog sustava Android
  Download
PDF 1.52 MB
undergraduate thesis
Analiza sigurnosti operacijskog sustava Android
Osijek: Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, 2020. urn:nbn:hr:200:068464
Štefanec, Mia
Josip Juraj Strossmayer University of Osijek
Faculty of Electrical Engineering, Computer Science and Information Technology Osijek
Department of Software Engineering
Chair of Programming Languages and Systems

Institutional repository: Faculty of Electrical Engineering, Computer Science and Information Technology Osijek

Cite this document

Štefanec, M. (2020). Analiza sigurnosti operacijskog sustava Android (Undergraduate thesis). Osijek: Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek. Retrieved from https://urn.nsk.hr/urn:nbn:hr:200:068464

Štefanec, Mia. "Analiza sigurnosti operacijskog sustava Android." Undergraduate thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, 2020. https://urn.nsk.hr/urn:nbn:hr:200:068464

Štefanec, Mia. "Analiza sigurnosti operacijskog sustava Android." Undergraduate thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, 2020. https://urn.nsk.hr/urn:nbn:hr:200:068464

Štefanec, M. (2020). 'Analiza sigurnosti operacijskog sustava Android', Undergraduate thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, accessed 29 April 2024, https://urn.nsk.hr/urn:nbn:hr:200:068464

Štefanec M. Analiza sigurnosti operacijskog sustava Android [Undergraduate thesis]. Osijek: Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek; 2020 [cited 2024 April 29] Available at: https://urn.nsk.hr/urn:nbn:hr:200:068464

M. Štefanec, "Analiza sigurnosti operacijskog sustava Android", Undergraduate thesis, Josip Juraj Strossmayer University of Osijek, Faculty of Electrical Engineering, Computer Science and Information Technology Osijek, Osijek, 2020. Available at: https://urn.nsk.hr/urn:nbn:hr:200:068464

Metadata
TitleAnaliza sigurnosti operacijskog sustava Android
Title (english)Security analysis of Android operating system
AuthorMia Štefanec
MentorGoran Martinović (mentor)
MentorKrešimir Grgić (sumentor)
Committee memberGoran Martinović (predsjednik povjerenstva)
Committee memberZdravko Krpić (član povjerenstva)
Committee memberAlfonzo Baumgartner (član povjerenstva)
GranterJosip Juraj Strossmayer University of Osijek
Faculty of Electrical Engineering, Computer Science and Information Technology Osijek
(Department of Software Engineering)
(Chair of Programming Languages and Systems)
Osijek
Defense date and country2020-09-29, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Program Engineering
Abstract
Cilj ovog rada je opisati probleme otjecanja podataka uzrokovanog zlonamjernom aplikacijom i loših kriptografskih rješenja te na primjeru pokazati najbolja rješenja. Za problem otjecanja podataka opisana je jedna zlonamjerna aplikacija koja se između ostalog pojavila u obliku aplikacije za vježbanja, a zapravo se radilo o špijunskom programu koji je uzrokovao otjecanje podataka iz aplikacija za potporu društvenim mrežama. Prilikom pokušaja instaliranja te aplikacije od treće strane na uređaj, Android sustav izdao je nekoliko upozorenja te na kraju blokirao instalaciju, a korišteni antivirusni alat također je prepoznao opasnost koju je i uklonio s uređaja. Za primjer lošeg kriptografskog rješenja, odabrana je jedna aplikacija kojoj je američka vlada otkrila slabosti u šifriranju zbog korištenja nepouzdanog i slabog algoritma s obzirom koje podatke o korisniku ima. Rješenje ovog problema je nepoznato, jer se korištene metode šifriranja pokušavaju skriti od napadača, ali je kao rješenje predloženo korištenje različitih ključeva za šifriranje za svakog pojedinog korisnika kako bi se, u slučaju napada na jednog, zaštitili ostali korisnici.
Abstract (english)
The goal of this paper is to describe the problems of data leakage caused by malicious application and poor cryptographic solutions and to show the best solution of their examples. One malicious application was described for the problem of data leakage, which appeared, among other things, in the form of a fitness application, but it was actually a spyware that caused data leakage from social media applications. When trying to install this application from a third party on the device, the Android system issued several warnings and eventually blocked the installation, and the antivirus tool which was used also recognized the danger and removed it from the device. As an example of a poor cryptographic solution, the HealthSuite application was chosen, since the US government revealed weaknesses in encryption due to the use of an unreliable and weak algorithm given the user data it has. The solution to this problem is unknown because developers try to hide used encryption methods from attackers, but as a solution it is suggested to use different encryption keys for each individual user to protect other users in case of an attack on one.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:200:068464
Study programmeTitle: Undergraduate University Study Programme in Computer Engineering
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2020-11-13 13:18:23