prikaz prve stranice dokumenta Sigurnost sustava za upravljanje sadržajem na webu
No public access
master's thesis
Sigurnost sustava za upravljanje sadržajem na webu
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2014. urn:nbn:hr:168:189418
Pavišić, Vlatka
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Pavišić, V. (2014). Sigurnost sustava za upravljanje sadržajem na webu (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:189418

Pavišić, Vlatka. "Sigurnost sustava za upravljanje sadržajem na webu." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2014. https://urn.nsk.hr/urn:nbn:hr:168:189418

Pavišić, Vlatka. "Sigurnost sustava za upravljanje sadržajem na webu." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2014. https://urn.nsk.hr/urn:nbn:hr:168:189418

Pavišić, V. (2014). 'Sigurnost sustava za upravljanje sadržajem na webu', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 25 December 2024, https://urn.nsk.hr/urn:nbn:hr:168:189418

Pavišić V. Sigurnost sustava za upravljanje sadržajem na webu [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2014 [cited 2024 December 25] Available at: https://urn.nsk.hr/urn:nbn:hr:168:189418

V. Pavišić, "Sigurnost sustava za upravljanje sadržajem na webu", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2014. Available at: https://urn.nsk.hr/urn:nbn:hr:168:189418

Metadata
TitleSigurnost sustava za upravljanje sadržajem na webu
Title (english)Security of the web content management system
AuthorVlatka Pavišić
MentorGordan Gledec (mentor)
Committee memberGordan Gledec (predsjednik povjerenstva)
Committee memberMirta Baranović (član povjerenstva)
Committee memberDamir Kalpić (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2014-07-10, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Sustavi za upravljanje sadržajem na webu olakšavaju stvaranje i održavanje web stranica. Danas većina web stranica koristi CMS. Među poznatijima su WordPress, Joomla i RefineryCMS. Raširena uporaba CMS-ova olakšava napadanje web sjedišta i web stranica koji ih koriste jer se s jednim otkrivenim sigurnosnim propustom može nanijeti šteta velikom broju web sjedišta i web stranica. Ako je CMS otvorenog koda, lakše mu se mogu identificirati slabosti. Česte ranjivosti CMS-ova su napad SQL umetanjem, pokretanje zahtjeva na drugom sjedištu, lažiranje zahtjeva na drugom sjedištu, nesigurne reference na objekte i uključivanje lokalnih datoteka. Razvijena je web aplikacija Nikofe CMS koja omogućuje stvaranje web sjedišta i pripadnih web stranica kroz jednostavno korisničko sučelje. Tijekom razvoja obraćena je posebna pozornost na sigurnost sustava. Korištena je tehnologija Ruby on Rails. Dane su upute za instalaciju i korištenje, a aplikacija je testirana alatom OWASP ZAP i zaključeno je da se nad aplikacijom ne mogu uspješno izvesti navedeni česti napadi.
Abstract (english)
Web content management systems make creating and maintaining websites easier. Today the majority of websites uses a CMS. Best-known CMSs are WordPress, Joomla and RefineryCMS. Widespread usage of CMSs makes it easier to attack websites and web pages. If a CMS is open-source, it's easier to identify its weaknesses. Common vulnerabilities include SQL injection, cross-site scripting, cross-site request forgery, insecure object references and local file upload. Nikofe CMS enables creation of websites and associated web pages by using a simple user interface. During development, a big emphasis has been put on system's security. Technology that has been used is Ruby on Rails. Installation and usage instructions have been given, the application has been tested with OWASP ZAP tool and it was concluded that the aforementioned common attacks can't be successfully performed on Nikofe CMS.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:189418
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2018-02-06 11:06:33