prikaz prve stranice dokumenta Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture
  Download
PDF 2.21 MB
professional thesis
Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. urn:nbn:hr:168:954314
Kapić, Goran
University of Zagreb
Faculty of Electrical Engineering and Computing
Department of Applied Computing

Institutional repository: FER Repository

Cite this document

Kapić, G. (2023). Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture (Professional thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:954314

Kapić, Goran. "Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. https://urn.nsk.hr/urn:nbn:hr:168:954314

Kapić, Goran. "Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. https://urn.nsk.hr/urn:nbn:hr:168:954314

Kapić, G. (2023). 'Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture', Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 22 July 2024, https://urn.nsk.hr/urn:nbn:hr:168:954314

Kapić G. Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture [Professional thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2023 [cited 2024 July 22] Available at: https://urn.nsk.hr/urn:nbn:hr:168:954314

G. Kapić, "Analiza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture", Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2023. Available at: https://urn.nsk.hr/urn:nbn:hr:168:954314

Metadata
TitleAnaliza isplativosti uvođenja koncepta mreže nultog povjerenja u tvrtku operatora energetske kritične infrastrukture
Title (english)Cost-benefit analysis of introducing the zero-trust network concept in critical energy infrastructure operator company
AuthorGoran Kapić
MentorKrešimir Fertalj (mentor)
Committee memberBoris Vrdoljak (predsjednik povjerenstva)
Committee memberKrešimir Fertalj (član povjerenstva)
Committee memberNeven Vrček (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
(Department of Applied Computing)
Zagreb
Defense date and country2023-03-27, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Rad obrađuje problematiku promjenjivih i rastućih prijetnji na Internetu u postpandemijskom svijetu i potrebu za novom paradigmom mrežne sigurnosti. Definiraju se osnovni pojmovi organizacije rada, deklariraju korišteni alati, metodologije procjene rizika i korištene metrike, te navode ograničenja i pretpostavke provedenih istraživanja. Pojašnjava se pojam arhitekture nultog povjerenja, utvrđuju njezini osnovni principi i tehnologije, te se projektno definira sigurnosna inicijativa uvođenja ove arhitekture u poslovanje. Dokumentiraju se analize rizika tvrtke prije (početak 2018. godine) i poslije (kraj 2022. godine) uvođenja sigurnosne inicijative, te se razrađuju i analiziraju ukupni troškovi njezinog uvođenja. Uspoređuje se dobiveni pozitivni pomak u profilu rizika tvrtke. Diskutira se opravdanost ulaganja za dobivene koristi kroz analizu troškova i koristi, te se uočavaju okolnosti koje bi takvu sigurnosnu inicijativu mogle učiniti opravdanom.
Abstract (english)
The paper deals with the issue of evolving and escalating threats on the Internet in the postpandemic world and the need for a new paradigm of network security. The basic concepts of work organization are defined, the tools used, risk assessment methodologies and metrics used are declared, and limitations and assumptions of the conducted research are stated. The concept of zero-trust architecture is clarified, its basic principles and technologies are determined, and the security initiative of introducing this architecture into business is defined. Risk analysis of the company before (beginning of 2018.) and after (end of 2022.) the introduction of the security initiative is documented, and the total costs of its introduction are elaborated and analysed. The resulting positive shift in the company's risk profile is analysed. The justification of the investment for the obtained benefits is discussed through the cost-benefit analysis and the circumstances that could make such a security initiative justified are noted.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:954314
Study programmeTitle: Specialist study programme in information security
Study programme type: university
Study level: postgraduate specialist
Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2023-04-18 07:37:18