prikaz prve stranice dokumenta Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja
No public access
master's thesis
Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. urn:nbn:hr:168:757465
Raspudić, Luka
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Raspudić, L. (2024). Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:757465

Raspudić, Luka. "Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. https://urn.nsk.hr/urn:nbn:hr:168:757465

Raspudić, Luka. "Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2024. https://urn.nsk.hr/urn:nbn:hr:168:757465

Raspudić, L. (2024). 'Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 26 December 2024, https://urn.nsk.hr/urn:nbn:hr:168:757465

Raspudić L. Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2024 [cited 2024 December 26] Available at: https://urn.nsk.hr/urn:nbn:hr:168:757465

L. Raspudić, "Emulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2024. Available at: https://urn.nsk.hr/urn:nbn:hr:168:757465

Metadata
TitleEmulacija napadača na usluge u oblaku za potrebe penetracijskog testiranja
Title (english)Emulating attackers on cloud services for penetration testing
AuthorLuka Raspudić
MentorStjepan Groš (mentor)
Committee memberStjepan Groš (predsjednik povjerenstva)
Committee memberVladimir Čeperić (član povjerenstva)
Committee memberDejan Škvorc (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2024-09-20, Croatia
Abstract
Ovaj rad se bavio sigurnosti Cloud usluga, na temelju incidenata zabilježenih na internetu te njihovih zapisa o propustima, shvatiti koliki opseg ranjivosti je s pružateljeve strane, a koliki opseg s krivoga korisničkoga korištenja. Na temelju pronađenih incidenata napravljene su simulacije pomoću platforme Cyber Conflict Simulator (CCS). Apstraktniji način rada CCS-a omogućava da se incidenti prokuhaju na dva slučaja. Prvi scenarij je napad na server bez autentifikacije i autorizacije, a drugi scenarij je napad na server sa slabom autentifikacijom. Rezultati su pokazali da je Cloud usluga sigurna, a najslabija točka je razvojni tim s prečacima koji se suprostavljaju sigurnosnim preporukama. Mogući razlog je neznanje tehnologije (važnost pristupnog ključa, javno dostupna postavka) što je veliki propust za bilo koju tehnologiju.
Abstract (english)
This paper’s purpose was to address security of Cloud services by analyzing incidents found on the internet, to understand the magnitude of flaws from provider’s side to client’s wrongful use. Based on the incidents found, simulations were made with the help of Cyber Conflict Simulator (CCS) platform. By functioning on the more abstract level, CCS allows the incidents to boil down into two scenarios. The first scenario is an attack on a server without authentication and authorization, and a second scenario is an attack on a server with weak authentication. The results showed that Cloud services are secure, the weakest link is the development team with cutting corners that are against safety recommendations. A possible reason is a lack of understanding how Cloud technology operates (importance of access keys, publicly available setting) which is a significant flaw for any technology.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:757465
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2024-11-07 05:42:15