prikaz prve stranice dokumenta Napadi na PSD2 API
No public access
master's thesis
Napadi na PSD2 API
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. urn:nbn:hr:168:280165
Šestan, Joško
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Šestan, J. (2022). Napadi na PSD2 API (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:280165

Šestan, Joško. "Napadi na PSD2 API." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. https://urn.nsk.hr/urn:nbn:hr:168:280165

Šestan, Joško. "Napadi na PSD2 API." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. https://urn.nsk.hr/urn:nbn:hr:168:280165

Šestan, J. (2022). 'Napadi na PSD2 API', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 09 May 2024, https://urn.nsk.hr/urn:nbn:hr:168:280165

Šestan J. Napadi na PSD2 API [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2022 [cited 2024 May 09] Available at: https://urn.nsk.hr/urn:nbn:hr:168:280165

J. Šestan, "Napadi na PSD2 API", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2022. Available at: https://urn.nsk.hr/urn:nbn:hr:168:280165

Metadata
TitleNapadi na PSD2 API
Title (english)Attacks on PSD2 API
AuthorJoško Šestan
MentorStjepan Groš (mentor)
Committee memberStjepan Groš (predsjednik povjerenstva)
Committee memberDejan Škvorc (član povjerenstva)
Committee memberLeonardo Jelenković (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2022-07-12, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
PSD2 direktiva Europske Unije izdana je u svrhu modernizacije i unapređenja bankovne industrije i usluga koje ona pruža. Banke dopuštaju TPP-ima dopuštaju pristup svojim API-ima čime obavljanje usluga korisnicima postaje pristupačnije. Na taj način otvaraju se novi napadački vektori. Veliki se fokus stavlja na sigurnost korisnika i njegovih resursa. U ovom radu prikazani su mogući napadi na API-je banaka. Osim napada koji iskorištavaju nedostatke implementacija na samim API-ima, fokus je bio na OAuth2 protokolu koji se koristi kao jedan od glavnih načina zaštite i autentifikacije korisnika. Ako se sigurnosti ne preda posebna važnost te ako zaštitni mehanizmi nisu ispravno imeplementirni ili nedostaju, korisnici banaka te same banke mogu pretrpjeti loše posljedice.
Abstract (english)
The PSD2 Directive of the European Union was issued for the purpose of modernizing and improving the banking industry and the services it provides. Banks allow TPPs to access their APIs making services to customers more accessible. In that way, new attack vectors are present. Great emphasis is placed on the security of the user and his resources. This paper presents possible attacks on bank APIs. In addition to attacks that take advantage of implementation shortcomings on the APIs themselves, the focus has been on the OAuth2 protocol, which is used as one of the main ways to protect and authenticate users. If security is not given special importance and if safeguards are not properly implemented or lacking, bank users and banks themselves can suffer bad consequences.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:280165
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2023-01-13 16:15:32