Tehnike otkrivanja ranjivosti web sjedišta s klijentske strane

undergraduate thesis

• Title (english): Client-Side Website Vulnerability Detection Techniques
• Author: Luka Srdarev
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Bruno Bijelić (član povjerenstva)
• Committee member: Mihael Marović (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-05, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U današnje vrijeme Web je jedan od najznačajnijih sredstava komunikacije i poslovanja.
Zbog raznih greška i manjkavosti u implementaciji, dizajnu, upotrebi ili upravljanju web aplikacijama dolazi do ranjivosti. Iskorištavanjem takvih ranjivosti napadači mogu ostvariti pristup poslužiteljima na kojima su ta web sjedišta smještena i/ili računalima i Web preglednicima posjetitelja.
Zbog toga je potrebno poznavati takve ranjivosti, kako do njih dolazi, kako ih spriječiti i kako ih napadači mogu iskoristiti. Zbog razmjera i količine današnjih Web apllikacije poželjno je i razviti program za automatsku detekciju takvih ranjivosti.
U ovom radu dan je pregled nekih učestalijih ranjivosti Weba i opisan je razvijeni program za automatsku detekciju ranjivosti Weba s klijentske strane. Prikazani su rezultati tog programa i komentirana su ograničenja takve implementacije.

Abstract (english)

Nowadays, the Web is one of the most important means of communication and business.
Due to various errors and shortcomings in the implementation, design, use or management of web applications, vulnerabilities arise. By exploiting such vulnerabilities, attackers can gain access to the servers on which those websites are hosted and/or to the computers and Web browsers of visitors.
It is therefore necessary to understand such vulnerabilities, how they occur, how to prevent them and how attackers can exploit them. Due to the scale and quantity of today's Web applications, it is desirable to develop a program for automatic detection of such vulnerabilities.
This paper provides an overview of some of the more common Web vulnerabilities and describes the developed program for automatic detection of Web vulnerabilities on the client side. The results of that program are presented and the limitations of such implementation are commented.

• Keywords: kibernetička sigurnost; ranjivosti weba; detekcija ranjivosti
• Keywords (english): cybersecurity; web vulnerabilities; vulnerability detection
• Language: croatian
• URN:NBN: urn:nbn:hr:168:077768
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 21:40:38