Sigurnost IT sustava smještenih u višeoblačnom okruženju

professional thesis

• Title (english): Security of IT systems in multi-cloud environment
• Author: Jelena Ardalić
• Mentor: Miljenko Mikuc (mentor)
• Committee member: Marin Vuković (predsjednik povjerenstva)
• Committee member: Miljenko Mikuc (član povjerenstva)
• Committee member: Krešimir Grgić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Cilj rada je prikazati primjenu sigurnosnih direktiva, koncepata i mehanizama na modelu sve prisutnijeg višeoblačnog sustava. Naime, pojava pandemije Covid-19 promijenila je način rada za mnoge organizacije kada je veliki broj zaposlenika zamijenio urede organizacija s vlastitim domom. To je dovelo i do sve veće potrebe za udaljenim pristupom resursima organizacije, i sve većim migracijama aplikacija i usluga u oblačne sustave. Takav pristup je pak potaknuo organizacije da sve više razmišljaju o sigurnosnim rizicima, te uspostavljanju vlastitih sigurnosnih strategija, kako ostvariti identifikaciju, provjeru autentičnosti i nadzor korisnika i uređaja te koje još dodatne mehanizme zaštite trebaju kako bi osigurali svoju infrastrukturu i informacije. Uzevši o obzir potrebe koje se nameću ubrzanom digitalnom transformacijom, ovaj rad prikazuje okvir NIS direktive s dostupnim alatima za uspostavljanje sigurnosne strategije i upravljanje njenim životnim ciklusom. Osim što je za organizaciju bitno da ima uspostavljenu sigurnosnu strategiju bitno je i da je implementirano rješenje u skladu s najboljim sigurnosnim praksama, koje su u skladu s najpoznatijim standardima u području kibernetičke sigurnosti, te na koje se oslanjaju i dostupna tehnička rješenja opisana u ovom radu – softverski definirane mreže i mehanizmi zaštite na aplikativnom nivou.

Abstract (english)

The aim of this paper is to show how security directives, concepts and mechanisms can be applied on increasingly present multi-cloud system. The emergence of Covid-19 pandemic changed the way of working for many organizations when a large number of employees replaced the organizations' offices with their own homes. That has led to an increasing need for remote access to the organization's resources, and increasing migrations of apllications and services to cloud systems. Such an approach has encouraged organizations to think more and more about security risks, about establishing their own security strategies, how to achieve identification, authentication and monitoring of users and devices, and what additional protection mechanisms they need to secure their infrastructure and information. Taking into account the needs imposed by the accelerated digital transformation, this paper presents the framework of the NIS directive with available tools for establishing a security strategy and managing its life cycle. In addition to the fact that it is important for the organization to have an established security strategy, it is also important that the implemented solution is in accordance with the best security practices, which are in accordance with the most well-known standards in the field of cyber security. Moreover, the available technical solutions described in this paper, software-defined networks and protection mechanisms at the application level, also rely on those standards.

• Keywords: sigurnost IT sustava; višeoblačno okruženje
• Keywords (english): IT system security; multi-cloud environment
• Language: croatian
• URN:NBN: urn:nbn:hr:168:671836
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2024-05-03 10:49:07