prikaz prve stranice dokumenta Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka
No public access
master's thesis
Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. urn:nbn:hr:168:072178
Prpić, Vjekoslav
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Prpić, V. (2024). Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:072178

Prpić, Vjekoslav. "Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. https://urn.nsk.hr/urn:nbn:hr:168:072178

Prpić, Vjekoslav. "Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. https://urn.nsk.hr/urn:nbn:hr:168:072178

Prpić, V. (2024). 'Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 12 January 2025, https://urn.nsk.hr/urn:nbn:hr:168:072178

Prpić V. Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2024 [cited 2025 January 12] Available at: https://urn.nsk.hr/urn:nbn:hr:168:072178

V. Prpić, "Bilježenje aktivnosti osoba tijekom rješavanja CTF zadataka", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2024. Available at: https://urn.nsk.hr/urn:nbn:hr:168:072178

Metadata
TitleBilježenje aktivnosti osoba tijekom rješavanja CTF zadataka
Title (english)Logging of participants' activities while solving CTF challenges
AuthorVjekoslav Prpić
MentorStjepan Groš (mentor)
Committee memberStjepan Groš (predsjednik povjerenstva)
Committee memberAdrian Satja Kurdija (član povjerenstva)
Committee memberLeonardo Jelenković (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2024-09-16, Croatia
Abstract
U današnjem dobu, sigurnost informacijskih sustava je ključna za zaštitu organizacija od sve sofisticiranijih kibernetičkih prijetnji, pri čemu su penetracijski testeri važni u održavanju sigurnosti sustava. Njihova obuka često uključuje rješavanje Capture The Flag (CTF) zadataka, koji simuliraju stvarne napade kako bi se testirale i poboljšale njihove vještine u kontroliranom okruženju. Ovaj diplomski rad fokusira se na bilježenje aktivnosti penetracijskih testera tijekom rješavanja CTF zadataka, definirajući zahtjeve za bilježenje različitih aktivnosti kao što su modificiranje datoteka, HTTP zahtjevi, izvršene naredbe, logovi korištenih aplikacija i mrežni promet. Korištenjem alata poput Kali Linuxa, Elasticsearcha, Kibane, Filebeata, Tcpdumpa i prilagođenih skripti, omogućeno je automatizirano prikupljanje i analiza podataka. Analizirani su mogući utjecaji na privatnost i izrađeni prijedlozi za minimiziranje negativnih učinaka kroz načela zaštite privatnosti podataka gdje je to moguće. Cilj rada je razvijanje programske podrške koja omogućuje detaljno praćenje aktivnosti penetracijskih testera.
Abstract (english)
In today's age, information systems security is critical to protecting organizations from increasingly sophisticated cyber attacks, with penetration testers being important in maintaining system security. Their training often involves solving Capture The Flag (CTF) tasks, which simulate real world attacks to test and improve their skills in a controlled environment. This thesis focuses on recording the activities of penetration testers while solving CTF tasks, defining the requirements for recording different activities such as file modifications, HTTP requests, executed commands, logs of applications used and network traffic. Using tools like Kali Linux, Elasticsearch, Kibana, Filebeat, Tcpdump and custom scripts, automated data collection and analysis is enabled. Possible impacts on privacy were analyzed and proposals were made to minimize negative effects through data privacy protection principles where possible. The goal of the work is to develop software support that enables detailed monitoring of the activities of penetration testers.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:072178
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2024-10-12 21:56:28