prikaz prve stranice dokumenta Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2
No public access
undergraduate thesis
Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. urn:nbn:hr:168:718291
Vrbić, Filip
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Vrbić, F. (2024). Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2 (Undergraduate thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:718291

Vrbić, Filip. "Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. https://urn.nsk.hr/urn:nbn:hr:168:718291

Vrbić, Filip. "Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. https://urn.nsk.hr/urn:nbn:hr:168:718291

Vrbić, F. (2024). 'Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2', Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 26 December 2024, https://urn.nsk.hr/urn:nbn:hr:168:718291

Vrbić F. Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2 [Undergraduate thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2024 [cited 2024 December 26] Available at: https://urn.nsk.hr/urn:nbn:hr:168:718291

F. Vrbić, "Analiza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2", Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2024. Available at: https://urn.nsk.hr/urn:nbn:hr:168:718291

Metadata
TitleAnaliza mogućnosti različitih API vatrozida i testiranje njihove primjene za PSD2
Title (english)Analysis of different API firewalls and testing their application on PSD2
AuthorFilip Vrbić
MentorStjepan Groš (mentor)
Committee memberStjepan Groš (predsjednik povjerenstva)
Committee memberPetar Paradžik (član povjerenstva)
Committee memberIva Sović (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2024-09-11, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
PSD2 omogućuje standardizirani i sigurni pristup bankovnim podacima putem API- ja, što stvara potrebu za učinkovitim sigurnosnim rješenjima poput vatrozida. U radu se istražuje prilagodba vatrozida za zaštitu API-ja zasnovanih na PSD2 direktivi, s posebnim naglaskom na usporedbu različitih rješenja. Dva vatrozida, Wallarm API Firewall i Open-appsec, odabrana su za analizu zbog različitih pristupa zaštiti. Wallarm se os- lanja na validaciju prema OpenAPI specifikaciji i zaštitu temeljenu na prepoznavanju uzoraka, dok Open-appsec koristi modele strojnog učenja. Analiza prikazuje njihove prednosti, ograničenja te utjecaj na sigurnosne rizike API-ja.
Abstract (english)
PSD2 enables standardized and secure access to bank data via APIs, which creates the need for effective security solutions such as firewalls. The paper investigates the adaptation of firewalls for the protection of APIs based on the PSD2 directive, with special emphasis on the comparison of different solutions. Two firewalls, Wallarm API Firewall and Open-appsec, were selected for analysis due to their different protection approaches. Wallarm relies on validation against the OpenAPI specification and protection based on pattern recognition, while Open-appsec uses machine learning models. The analysis shows their advantages, limitations and impact on API security risks.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:718291
Study programmeTitle: Computing
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2024-10-12 22:27:35