Smještanje i podešavanje vatrozida u mreži na temelju politika visoke razine apstrakcije

master's thesis

• Title (english): Network placement and configuration of firewalls based on high-level policies
• Author: Hrvoje Kristić
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Marin Golub (član povjerenstva)
• Committee member: Vlado Sruk (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-07-13, Croatia

Abstract

Velike organizacije mogu imati velik broj uređaja u svojoj računalnoj mreži te smještanje i podešavanje vatrozida u takvim mrežama može zahtijevati velik napor. Isto tako podešavanjem velikog broja vatrozida lako može doći do pogreške koja može rezultirati sigurnosnim rizikom. Iz navedenih razloga ovaj diplomski rad istražuje problem ručnog smještanja i podešavanja vatrozida u računalnim mrežama te predstavlja razvijenu aplikaciju za automatizaciju tih procesa.
Aplikacija je podijeljena u dva dijela, prvi dio aplikacije određuje raspored vatrozida u mreži temeljem sličnosti prometa između uređaja te određuje topologiju cijele mreže koja se koristi u drugom dijelu aplikacije. Drugi dio obavlja podešavanje vatrozida na temelju odabranih sigurnosnih pravila, prevodeći ih u iptables format.
Aplikacija uspješno rješava navedene probleme te demonstrira da ovo područje računarstva ima jako velik potencijal za daljnji razvoj.

Abstract (english)

Large organizations can have a significant number of devices in their computer network, placing and configuring firewalls in such networks can require a substantial effort. Similarly, configuring a large number of firewalls can easily lead to errors that may result in security risks. For these reasons, this thesis explores the problem of manual firewall placement and configuration in computer networks and presents a developed application for automating these processes.
The application is divided into two parts. The first part determines the placement of firewalls in the network based on traffic similarities between devices and establishes the topology of the entire network, which is then used in the second part of the application. The second part handles the configuration of firewalls based on selected security rules, translating them into the iptables format.
The application successfully addresses the aforementioned issues and demonstrates that this area of computer science has great potential for further development.

• Keywords: Vatrozid; Iptables; Računalna mreža; Mrežna topologija
• Keywords (english): Firewall; Iptables; Computer network; Network topology
• Language: croatian
• URN:NBN: urn:nbn:hr:168:500155
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-10-11 09:25:51