prikaz prve stranice dokumenta Zaštita od napada u kojima se izravno koristi sažetak zaporke
No public access
undergraduate thesis
Zaštita od napada u kojima se izravno koristi sažetak zaporke
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. urn:nbn:hr:168:401751
Novković, Bojan
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Novković, B. (2018). Zaštita od napada u kojima se izravno koristi sažetak zaporke (Undergraduate thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:401751

Novković, Bojan. "Zaštita od napada u kojima se izravno koristi sažetak zaporke." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. https://urn.nsk.hr/urn:nbn:hr:168:401751

Novković, Bojan. "Zaštita od napada u kojima se izravno koristi sažetak zaporke." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. https://urn.nsk.hr/urn:nbn:hr:168:401751

Novković, B. (2018). 'Zaštita od napada u kojima se izravno koristi sažetak zaporke', Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 18 November 2024, https://urn.nsk.hr/urn:nbn:hr:168:401751

Novković B. Zaštita od napada u kojima se izravno koristi sažetak zaporke [Undergraduate thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2018 [cited 2024 November 18] Available at: https://urn.nsk.hr/urn:nbn:hr:168:401751

B. Novković, "Zaštita od napada u kojima se izravno koristi sažetak zaporke", Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2018. Available at: https://urn.nsk.hr/urn:nbn:hr:168:401751

Metadata
TitleZaštita od napada u kojima se izravno koristi sažetak zaporke
Title (english)Pass-the-Hash Attack Protection
AuthorBojan Novković
MentorMarin Golub (mentor)
Committee memberMarin Golub (predsjednik povjerenstva)
Committee memberMladen Karan (član povjerenstva)
Committee memberDomagoj Alagić (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2018-07-13, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Napad s izravnim korištenjem sažetka zaporke predstavlja razred napada koji uklanjaju potrebu za mukotrpnim postupcima probijanja ili pogađanja zaporke iz njenog sažetka. Napad iskorištava ranjivost koja je posljedica programskog ostvarenja funkcionalnosti jednokratne prijave na operacijskom sustavu Windows koja omogućava korisnicima pristup svim dozvoljenim resursima sa samo jednim unosom zaporke, što zahtjeva lokalno skladištenje sažetka zaporke. Korištenjem alata za prepisivanje postojećih sažetaka zaporki u memoriji, napadači mogu bilo koji sažetak zaporke pohraniti umjesto trenutnog lokalno pohranjenog sažetka i uspješno pristupiti korisničkom računu čiji sažetak zaporke posjeduju.
Abstract (english)
The "Pass-the-Hash" attack introduces a new class of attacks which eliminate the need for computationally expensive operations like password cracking or guessing. It exploits a vulnerability in the Single Sign On functionality implemented in the Windows operating system. This functionality enables a user to access every allowed resource with just one input of his/her password, and because of that, the operating system locally caches password hashes. Using one of the available tools for overwriting password hashes in memory, the attacker is able to successfully access any user account, provided that he possesses the appropriate password hash.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:401751
Study programmeTitle: Computing
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2019-03-13 23:26:39