Analiza sigurnosti sustava za autoriziranu kontrolu pristupa pametnom uredu

undergraduate thesis

• Title (english): Title: Security Analysis of Smart Office Authorized Access Control
• Author: Marko Dragić
• Mentor: Miljenko Mikuc (mentor)
• Committee member: Miljenko Mikuc (predsjednik povjerenstva)
• Committee member: Denis Salopek (član povjerenstva)
• Committee member: Marko Pavelić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2018-07-13, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U ovom završnom radu opisan je sustav za autoriziranu kontrolu pristupa i obavljana je analizira sigurnosti tog sustava.
Rad se sastoji od 3 poglavlja. U prvom poglavlju je opisan je razvoj i porast pažnje prema sigurnosti u svijetu Interneta stvari. U drugom poglavlju je opisan proučavani sustav i njegove karakteristike. U zadnje, trećem, poglavlju opisane su sve pronađene sigurnosne ranjivosti komponenti ovog studijskog slučaja. Također uz opis ranjivosti i mogućeg napada na tu ranjivost navedeni su postupci kojima se te pronađene ranjivosti mogu ukloniti.

Abstract (english)

In this final thesis a system for authorized access control is presented and security analysis of the system was performed.
The thesis consists of 3 chapters. The first chapter describes the development and rise in attention to the security of the Internet of things. The second chapter describes the system and its characteristics. The last, third, chapter describes all the security vulnerabilities that were found in the components of this case study. In addition, there are descriptions of the found vulnerabilities and which possible attacks can be used to abuse this vulnerability. Procedures for removing vulnerabilities are given.

• Keywords: Internet stvari; sigurnost; SSL/TLS; pametni ured; ESP8266; Android; HTTPS
• Keywords (english): Internet of things; security; SSL/TLS; smart office; ESP8266; Android; HTTPS
• Language: croatian
• URN:NBN: urn:nbn:hr:168:367771
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-03-13 20:00:07