prikaz prve stranice dokumenta Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"
  Download
PDF 1.47 MB
professional thesis
Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. urn:nbn:hr:168:501155
Merkaš, Marko
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Merkaš, M. (2023). Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela" (Professional thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:501155

Merkaš, Marko. "Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. https://urn.nsk.hr/urn:nbn:hr:168:501155

Merkaš, Marko. "Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. https://urn.nsk.hr/urn:nbn:hr:168:501155

Merkaš, M. (2023). 'Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"', Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 25 July 2024, https://urn.nsk.hr/urn:nbn:hr:168:501155

Merkaš M. Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela" [Professional thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2023 [cited 2024 July 25] Available at: https://urn.nsk.hr/urn:nbn:hr:168:501155

M. Merkaš, "Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"", Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2023. Available at: https://urn.nsk.hr/urn:nbn:hr:168:501155

Metadata
TitleKibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"
Title (english)Cyber security of a road tunnel surveillance and control system
AuthorMarko Merkaš
MentorStjepan Groš (mentor)
Committee memberMiljenko Mikuc (predsjednik povjerenstva)
Committee memberStjepan Groš (član povjerenstva)
Committee memberKrešimir Grgić (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2023, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Kibernetička sigurnost upravljačkih sustava od iznimne je važnosti za funkcioniranje kritične infrastrukture, a o njezinoj implementaciji potrebno je voditi računa već kod projektiranja samog sustava. Zbog toga je kod projektiranja sustava za nadzor i upravljanje cestovnim tunelom ključno odabrati arhitekturu koju će biti što je moguće lakše zaštiti od kibernetičkih napada. U radu je odabrana je ISA95 mrežna arhitektura u koju su uključeni svi nadzorni i sigurnosni sustavi u tunelu, a nakon čega je pomoću stabla napada razmatrana sigurnost dobivenog sustava. Zaključeno je da je ISA95 arhitektura primjenjiva u slučaju da se ne koriste IIoT uređaji i da je ključno osigurati vezu između razine 2 – serverske infrastrukture nadzorno-upravljačkog sustava i razine 4 – poslovne mreže tvrtke koja upravlja tunelom. Zaštitu je potrebno provoditi pravilno dizajniranom DMZ zonom.
Abstract (english)
Cybersecurity of control systems is of utmost importance for the functioning of critical infrastructure, and its implementation needs to be taken into account during the design phase of the system itself. Therefore, when designing a supervisory and control system for a road tunnel, it is crucial to select an architecture that can be easily protected from cyber attacks. In this paper, the ISA95 network architecture was chosen that includes all the monitoring and security systems in the tunnel. Subsequently, the security of the obtained system was analyzed using attack trees. It was concluded that the ISA95 architecture is applicable if IIoT devices are not used, and it is crucial to secure the connection between Level 2 - server infrastructure of the surveillance and control system and Level 4 - the business network of the company that responsible for the operation of the tunnel. Properly designed DMZ (demilitarized zone) is necessary for implementing all of the needed defense mechanisms.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:501155
Study programmeTitle: Specialist study programme in information security
Study programme type: university
Study level: postgraduate specialist
Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2024-05-03 10:55:24