prikaz prve stranice dokumenta Mrežna forenzika
Access restricted to students and staff of home institution
master's thesis
Mrežna forenzika
Rijeka: University of Rijeka, Faculty of Engineering, 2021. urn:nbn:hr:190:584571
Milohanić, Luka
University of Rijeka
Faculty of Engineering
Department of Computer Engineering
Section of Communication Systems

Institutional repository: Repository of the University of Rijeka, Faculty of Engineering

Cite this document

Milohanić, L. (2021). Mrežna forenzika (Master's thesis). Rijeka: University of Rijeka, Faculty of Engineering. Retrieved from https://urn.nsk.hr/urn:nbn:hr:190:584571

Milohanić, Luka. "Mrežna forenzika." Master's thesis, University of Rijeka, Faculty of Engineering, 2021. https://urn.nsk.hr/urn:nbn:hr:190:584571

Milohanić, Luka. "Mrežna forenzika." Master's thesis, University of Rijeka, Faculty of Engineering, 2021. https://urn.nsk.hr/urn:nbn:hr:190:584571

Milohanić, L. (2021). 'Mrežna forenzika', Master's thesis, University of Rijeka, Faculty of Engineering, accessed 25 December 2024, https://urn.nsk.hr/urn:nbn:hr:190:584571

Milohanić L. Mrežna forenzika [Master's thesis]. Rijeka: University of Rijeka, Faculty of Engineering; 2021 [cited 2024 December 25] Available at: https://urn.nsk.hr/urn:nbn:hr:190:584571

L. Milohanić, "Mrežna forenzika", Master's thesis, University of Rijeka, Faculty of Engineering, Rijeka, 2021. Available at: https://urn.nsk.hr/urn:nbn:hr:190:584571

Metadata
TitleMrežna forenzika
Title (english)Network Forensics
AuthorLuka Milohanić
MentorMladen Tomić (mentor)
Committee memberMiroslav Joler (predsjednik povjerenstva)
Committee memberIvo Ipšić (član povjerenstva)
Committee memberMladen Tomić (član povjerenstva)
GranterUniversity of Rijeka
Faculty of Engineering
(Department of Computer Engineering)
(Section of Communication Systems)
Rijeka
Defense date and country2021-09-28, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Tema ovog diplomskog rada je mrežna forenzika. U prvom poglavlju objašnjena je mrežna komunikacija korištenjem TCP/IP modela i osnovni protokoli pojedinog sloja. Svaki sloj sadrži podatke koji se mogu upotrijebiti u mrežnoj forenzici. Nakon toga objašnjen je tijek postupka u mrežnoj forenzici od prikupljanja dokaza do pisanja izvješća. Podaci se mrežom mogu prenositi električnim ili svjetlosnim signalom korištenjem kabla ili bežičnim putem korištenjem radiovalova. Nakon toga slijede postupci prikupljanja informacija s pojedine vrste kablova korištenjem uređaja mrežni TAP. Podatke koji putuju bežičnim putem prikupljaju se korištenjem WLAN kartice koja podržava monitor način rada. Sljedeće poglavlje opisuje alate koji se koriste u mrežnoj forenzici. Za prikupljanje mrežnih paketa prikazane su glavne funkcionalnosti Wireshark i Networkminer alata. Za analizu mrežnog toka prikazane su glavne funkcionalnosti Yaf i SiLK alata. Praćenje elektroničke pošte opisano je korištenjem Emailtrackerpro alata. Analiza povijesti pregledavanja Internet preglednika objašnjena je korištenjem DB browsera za SQLite. Za prikupljanje paketa i njihovo dešifriranje objašnjeno je korištenjem Aircrack-ng alata. Na kraju ovog diplomskog rada napravljena je kompletna forenzička analiza iz snimljenog mrežnog prometa nakon čega su prikazani pronađeni dokazi i zaključak istrage.
Abstract (english)
The topic of this thesis is network forensics. The first chapter explains network communication using the TCP / IP model and the basic protocols of each layer. Each layer contains data that can be used in network forensics. After that, the course of the procedure in network forensics from gathering evidence to writing a report was explained. Data can be transmitted over a network by electrical or light signal using a cable or wirelessly using radio waves. Therefore, the procedures for collecting information from a particular type of cable using a device called a network tap are explained. Data that travels wirelessly is collected using a WLAN card that supports monitor mode. The next section explains the tools used in network forensics. To collect network packets, the main functionalities of the wireshark and Networkminer tools are shown. For network flow analysis, the main functionalities of Yaf and SiLK tools are explained. Email tracking is explained using the Emailtrackerpro tool. Analysis of Internet browser browsing history is explained using the DB browser for SQ lite. To collect packets and decrypt them is explained using the Aircrackng tool. At the end of this thesis, a complete forensic analysis was made from the recorded network traffic, after which the evidence found and the conclusion of the investigation were presented.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:190:584571
Study programmeTitle: Computer Engineering
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsAccess restricted to students and staff of home institution
Terms of useLicence In copyright icon
Created on2021-10-18 08:51:46