Sustav dodataka za dohvat podataka o IP adresama i drugim mrežnim artefaktima iz izvora na Internetu

undergraduate thesis

• Title (english): Plugin system for retrieval of data about IP addresses and other network artefacts from sources on the Internet
• Author: Nika Brašnović
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ivan Grgurina (član povjerenstva)
• Committee member: Ivan Crnomarković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2022-09-13, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Dodatci su vrlo popularno proširenje u razvoju aplikacija zbog svoje jednostavne prirode – ne utječu na glavni dio programskog koda, mogu se pozivati i uključivati u rad aplikacije neovisno o ostalim dodatcima, te razvoj novih funkcionalnosti uz pomoć dodataka ne utječe na stabilnost i funkcioniranje do tada izgrađene aplikacije. Ovaj će rad detaljnije opisati rad dodataka uz fokus na Pluggy, Python modul za izradu dodataka, na primjeru CTI (eng. Cyber Threat Intelligence) aplikacije koja na temelju zapisnika IP adresa pronalazi podatke uz pomoć OSINT (eng. Open-source intelligence) alata dostupnih na internetu. Svaki korišteni OSINT alat ima svoju implementaciju dodatka u Pluggy modulu, te funkcionira neovisno o drugim dodatcima. Također, bit će opisane osnovne karakteristike CTI procesa i OSINT alata, uz analizu raznih izvora o IP adresama koji su trenutno dostupni za korištenje.

Abstract (english)

Plugins are a very popular extension in application development due to their simple nature - they do not affect the main part of the program code, can be called and included in the application independently of other plugins, and the development of new functionalities with the help of plugins does not affect applications. This paper will describe in more detail the work of plugins with a focus on Pluggy, a Python plugin module, on the example of CTI (Cyber Threat Intelligence) application that finds data based on IP address logs using OSINT (Open-source intelligence) tools available on the Internet. Each OSINT tool used has its own plugin implementation in the Pluggy module and works independently of other plugins. Also, the basic characteristics of the CTI process and the OSINT tool will be described, with an analysis of the various sources on IP addresses currently available for use.

• Keywords: Obavještajni rad o kibernetičkim prijetnjama; Pluggy; sustav dodataka; izvori o IP adresama; OSINT alati
• Keywords (english): Cyber Threat Intelligence; Pluggy; Plugin System; IP Address Sources; OSINT Tools
• Language: croatian
• URN:NBN: urn:nbn:hr:168:271733
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-15 09:49:55