Analiza zlonamjernih poruka elektroničke pošte

undergraduate thesis

• Title (english): Analysis of malicious email messages
• Author: Luka Vukota
• Mentor: Marin Vuković (mentor)
• Committee member: Marin Vuković (predsjednik povjerenstva)
• Committee member: Renato Šoić (član povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-09-12, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Phishing poruke u danas su jedan od omiljenih vektora napada kibernetičkih kriminalaca. Phishing putem elektroničke pošte, koji se konstantno razvija, često uključuje sofisticirane lažne domene, stranice te nacine prikrivanja zloćudnog koda koji otežava detekciju potencijalnih phishing poruka. Sustav za analizu poruka elektroničke pošte, s jednostavnim sučeljem kako bi se korisniku olakšalo zaključivanje, na temelju poruke elektroničke pošte izvršava analizu. Uz pomoć vanjskih sučelja MXToolbox i IPGeoLocation sustav radi analizu putanje poruke elektroničke pošte, koju u konačnici i prikazuje, potvrđuje validnosti DKIM, DMARC, i SPF zapisa o pošiljatelju. Opisani sustav PhishAnalyzer pokazuje dobre rezultate, mjerljive s konkurentnim alatima na tržištu poput Google Admin Toolbox MessageHeader i Phish.ly.

Abstract (english)

Phishing emails today represent one of the favorite attack vectors for cybercriminals. Email phishing, which is constantly evolving, often involves sophisticated fake
domains, websites, and methods of concealing malicious code, making it challenging
to detect potential phishing messages. A system for analyzing email messages, with
a user-friendly interface to facilitate decision-making, performs the analysis based on
the email message. Using external interfaces such as MXToolbox and IPGeoLocation,
the system analyzes the email’s path, ultimately displaying it and verifying the validity
of DKIM, DMARC, and SPF sender records. The described PhishAnalyzer system demonstrates good results, comparable to competitive tools in the market such as Google
Admin Toolbox MessageHeader and Phish.ly.

• Keywords: phishing; analiza poruka elektroničke pošte; DKIM; DMARC; SPF; prikaz putanje elektroničke pošte
• Keywords (english): phishing; email message analysis; DKIM; DMARC; SPF; email path display
• Language: croatian
• URN:NBN: urn:nbn:hr:168:571045
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-10-11 11:00:16