prikaz prve stranice dokumenta Sigurnost web aplikacija
No public access
undergraduate thesis
Sigurnost web aplikacija
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2014. urn:nbn:hr:168:188695
Vinković, Josip
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Vinković, J. (2014). Sigurnost web aplikacija (Undergraduate thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:188695

Vinković, Josip. "Sigurnost web aplikacija." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2014. https://urn.nsk.hr/urn:nbn:hr:168:188695

Vinković, Josip. "Sigurnost web aplikacija." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2014. https://urn.nsk.hr/urn:nbn:hr:168:188695

Vinković, J. (2014). 'Sigurnost web aplikacija', Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 07 July 2024, https://urn.nsk.hr/urn:nbn:hr:168:188695

Vinković J. Sigurnost web aplikacija [Undergraduate thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2014 [cited 2024 July 07] Available at: https://urn.nsk.hr/urn:nbn:hr:168:188695

J. Vinković, "Sigurnost web aplikacija", Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2014. Available at: https://urn.nsk.hr/urn:nbn:hr:168:188695

Metadata
TitleSigurnost web aplikacija
Title (english)Web application security
AuthorJosip Vinković
MentorAnte Đerek (mentor)
Committee memberAnte Đerek (predsjednik povjerenstva)
Committee memberIvan Budiselić (član povjerenstva)
Committee memberKlemo Vladimir (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2014-07-14, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Ovdje će se raditi o analizi ranjivosti na Internet stranice. Točnije, radit će se o takozvanim XSS napadima. XSS napadi su popularni napadi na Internet stranice i čine preko pola svih napada na Internet stranice. Razlog tomu je jednostavnost takvih napada te što je kod stvaranja Internet stranica lako napraviti propuste koji omogućavaju takve napade. Prvo će se ukratko obraditi koji su najčešći problemi koji se tiču web sigurnosti i zašto je sigurnost na internetu važna. Zatim se ukratko iznose najčešće vrste napada na Internet stranice i potom kreće u razmatranje XSS napada. Objašnjava se što je XSS te kakve vrste XSS napada postoje, za čega se koriste, te potom se koncentrira na detekciju i obranu od XSS napada. Potom se dolazi do nove vrste XSS napada, takozvanih mXSS napada te se objašnjava što je mXSS te po čemu se razlikuje od XSS napada. Objašnjava se što je to potpuno drugačije od XSS-a te na koje načine se mogu detektirati i potom spriječiti unatoč velikoj neupućenosti šire informatičke zajednice u probleme vezane za mXSS. Na kraju se dolazi do praktičnog dijela i aplikacije namijenjene za jednostavnu i brzu obranu od XSS napada, kao alternativa za postojeće velike alate. Ukratko se govori o čemu se radi u aplikaciji te na kojoj je arhitekturi zasnovana i na koji se način koristi.
Abstract (english)
Here is analysing of security of web pages. It is about XSS attacks. XSS attacks are famous attacks on web pages and are most common type of attacks on the Internet. Reason for that is that XSS attacks are easy to master and also it is easy to make some security flaws which then enable XSS attacks. First there will be introduction in web security and talk about some common problem in web security and also, why web security is important at all. Then there are common ways of attacks on web pages and after that we dive in into XSS. Afterwards there is explanation what XSS is, and what kind of XSS attacks are there, and also, what it is used for. Hence, we come to defence against XSS attacks. Then we came to new kind of XSS attacks, so called mXSS attacks. There is explanation what is mXSS and what are differences regarding “standard” XSS attacks. Afterwards we examine ways of detecting mXSS and defence against mXSS regarding the ignorance of IT community about mXSS. At the end is tool for simple defence against both XSS and mXSS as alternative to big bulky tools on the market. It is briefly discussed about what is the tool, the ways of implementation and the ways of usage of it.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:188695
Study programmeTitle: Computing
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2018-02-05 17:22:11