Pregled sigurnosnih problema sa zaporkama

undergraduate thesis

• Title (english): Overview of common security issues with passwords
• Author: Marino Rabuzin
• Mentor: Ante Đerek (mentor)
• Committee member: Ante Đerek (predsjednik povjerenstva)
• Committee member: Petar Paradžik (član povjerenstva)
• Committee member: Martin Tutek (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-15, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U završnom radu obrađeni su najčešći napadi na lozinke poput napada grubom silom,
napad rječnikom, napad duginim tablicama i zloćudni program vezan uz ekstrakciju
osjetljivih podataka s računala žrtve, a to je keylogger. Analizirano je koju sve štetu napadi
mogu izazvati i kako se napada manifestira. Također je demonstriran napad na realno
konstruirane lozinke korisnika. Kako bi se mogli zaštiti od gore navedenih napada
analizirana je adekvatna obrana od napada. Kao dodatna zaštita korisničkog računa od
napada teorijski je analiziran i praktično demonstriran postupak dvofaktorske autentifikacije.
Za potrebe visoke razine sigurnosti analizirana je zaštita u vidu višefaktorske autentifikacije.

Abstract (english)

The topic of this final paper goes through the most common password attacks such as
brute force attack, dictionary attack, rainbow table attack and malicious software often
referred to as keylogger. The way attacks manifest and the damage they can cause have been
analysed. Furthermore, attacks on realistically constructed user passwords have been
demonstrated. In order to protect from the attacks mentioned above, methods of defence
from such attacks have been analysed. To further protect user accounts from attacks there is
a theoretical analysis and practical demonstration of two-factor authentication. To satisfy
high-security needs, multi-factor authentication is also analysed.

• Keywords: Napad grubom silom; Napad rječnikom; Kombinirani napad; Keylogger; Napad duginim tablicama; Lozinka; Dvofaktorska autentifikacija; Višefaktorska autentifikacija; Zaštita; Sažetak
• Keywords (english): Brute force attack; Dictionary attack; Combinator attack; Keylogger; Rainbow table attack; Password; Two-factor authentication; Multi-factor authentication; Protection; Hash
• Language: croatian
• URN:NBN: urn:nbn:hr:168:616009
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 21:30:25