Otkrivanje zloćudnih programa u uređajima interneta stvari

master's thesis

• Title (english): Detecting malware in Internet of things devices
• Author: Hrvoje Spajić
• Mentor: Marin Golub (mentor)
• Committee member: Marin Golub (predsjednik povjerenstva)
• Committee member: Domagoj Jakobović (član povjerenstva)
• Committee member: Dejan Škvorc (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-09-15, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U ovom radu opisani su uređaji interneta stvari, njihova arhitektura i slabosti te, na njih usmjereni, napadi. Opisani su sustavi za otkrivanje upada te je navedena njihova podjela po izvoru informacija i po načinu opisivanja događaja. Opisan je alat Suricata, prikazana je njegova instalacija i osnovne mogućnosti. U praktičnom dijelu prikazana je statička i dinamička analiza zločudnog programa Mirai te je napisano pravilo za alat Suricatu koje ga otkriva. U praktičnom dijelu također je implementirano i opisano generaliziranje familije Mirai koristeći SCDG grafove i gSpan algoritam rudarenja grafova.

Abstract (english)

This paper describes IoT devices, their architecutre and voulnerabilities, so as, attacks on them. Intrusion detection systems have also been presented, and their basic division according to the source of information and the way of describing event is listed. Installation and basic possibilities of Suricata software has been shown. In practical part, statical and dynamical analysis of Mirai malware has been conducted, and apropriate rule for it’s discovery is presented for Suricata software. The practical part also shows a way of detecting Mirai family using graph mining and SCDG graphs.

• Keywords: Uredaj interneta stvari; IoT; Mirai; gSpan; rudarenje grafova; rudarenje podataka; Angr; simbolička analiza; statička analiza; dinamička analiza; suricata; sustavi za detekciju upada; IDS
• Keywords (english): Internet of Things; IoT; Mirai; gSpan; graph mining; data mining; Angr; symbolic analysis; static analysis; dynamic analysis; suricata; intrusion detection system; IDS
• Language: croatian
• URN:NBN: urn:nbn:hr:168:321289
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 13:49:44