Modeliranje ponašanja napadača na Internetu prije i tijekom provođenja napada

master's thesis

• Title (english): Modeling attackers on the Internet before and during attack execution
• Author: Igor Kramarić
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ante Đerek (član povjerenstva)
• Committee member: Dejan Škvorc (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2018-07-19, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Napredne ustrajne prijetnje danas su veliki sigurnosni problem organizacijama. Da bi se organizacije uspješno obranile od takve vrste napadača potrebno je pratiti i detaljno analizirati njihovo djelovanje. U ovom radu opisana je tehnika modeliranje napadača koja može pomoći u praćenju djelovanja napadača na efikasan, efektivan i strukturiran način. Opisani su najpoznatiji modeli, te je dan primjer korištenja modela na primjerima napada koji su se dogodili u stvarnom svijetu. Također dan je pregled i evaluacija alata za emulaciju napadača koji se temelje na tim modelima te je prikazan rad s Caldera alatom. Na kraju je dan prijedlog mogućih daljnjih smjerova istraživanja.

Abstract (english)

Advance persistent threats are a major cybersecurity problem for organizations. For successful defense against these attackers organizations need to analyze every action they made in detail. In this thesis technique called attack modeling is described to help organizations to effectively, efficiently and in structured manner represent actions that an attacker makes. Most famous and widely used models are described, and some models are used to describe famous attacks that happen in the real world. Also given is an overview and evaluation of tools used for attack emulation, that are based on previously described models, and in more depth is shown how to use Caldera tool. At the end possible further research directions are discussed.

• Keywords: Modeliranje napadača; Napredne ustrajne prijetnje; Kibernetički lanac prekidanja; Dijamantni model; Napadačka stabla; Emulacija napadača
• Keywords (english): Attack modeling; Advance persistent threat; Cyber kill chain; Diamond model; Attack tree; Attack emulation
• Language: croatian
• URN:NBN: urn:nbn:hr:168:197020
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-03-13 21:55:31