prikaz prve stranice dokumenta Implementacija PSD2 klijenta
No public access
master's thesis
Implementacija PSD2 klijenta
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. urn:nbn:hr:168:305849
Karamehmedović, Tarik
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Karamehmedović, T. (2022). Implementacija PSD2 klijenta (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:305849

Karamehmedović, Tarik. "Implementacija PSD2 klijenta." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. https://urn.nsk.hr/urn:nbn:hr:168:305849

Karamehmedović, Tarik. "Implementacija PSD2 klijenta." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2022. https://urn.nsk.hr/urn:nbn:hr:168:305849

Karamehmedović, T. (2022). 'Implementacija PSD2 klijenta', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 12 May 2024, https://urn.nsk.hr/urn:nbn:hr:168:305849

Karamehmedović T. Implementacija PSD2 klijenta [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2022 [cited 2024 May 12] Available at: https://urn.nsk.hr/urn:nbn:hr:168:305849

T. Karamehmedović, "Implementacija PSD2 klijenta", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2022. Available at: https://urn.nsk.hr/urn:nbn:hr:168:305849

Metadata
TitleImplementacija PSD2 klijenta
Title (english)PSD2 client implementation
AuthorTarik Karamehmedović
MentorStjepan Groš (mentor)
Committee memberStjepan Groš (predsjednik povjerenstva)
Committee memberDejan Škvorc (član povjerenstva)
Committee memberLeonardo Jelenković (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2022-07-12, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Uvođenjem revidirane direktive o platnim uslugama, banke su morale otvoriti svoje sustave trećim pružateljima platnih usluga. S obzirom na to da banke rukuju s izrazito osjetljivim podacima, potrebno je posebnu pozornost obratiti na sigurnost API-ja. Kako bi se to osiguralo, API je potrebno temeljito testirati. Kako bi se implementirao alat proučavalo se Erste PSD2 XS2A sučelje, sve komponente HTTP zahtjeva te česte ranjivosti aplikacijskih programskih sučelja. Nakon toga se u radu razvio alat namijenjen za automatizirano testiranje i provođenje napada nad REST API-jima. Uz standardne komponente potrebne za testiranje API-ja, razvijene su i komponente koje olakšavaju testiranje bankovnih PSD2 XS2A sučelja. Na kraju su, uz pomoć implementiranog alata, implementirani testovi i napadi na probnoj instanci Erste PSD2 XS2A sučelja.
Abstract (english)
With the introduction of the revised Payment Services Directive, banks had to open their systems to third party payment service providers. Given that banks handle extremely sensitive data, special attention needs to be paid to the security of APIs. To ensure this, the API needs to be thoroughly tested. In order to implement the tool, the Erste PSD2 XS2A interface, all components of HTTP requests, and common vulnerabilities in application programming interfaces were studied. After that, a tool intended for automated testing and execution of attacks on REST APIs was developed. In addition to the standard components required for API testing, components have been developed to facilitate testing of banking PSD2 XS2A interfaces. Finally, with the help of the implemented tool, tests, and attacks on the test instance of the Erste PSD2 XS2A interface were implemented.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:305849
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2023-01-14 09:04:41