Slabosti kriptografske zaštite u bazi podataka Postgres

undergraduate thesis

• Title (english): Weaknesses of cryptographic protection in Postgres database engine
• Author: Lovro Matošević
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ivona Brajdić (član povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-07-07, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Naglasak ovog rada je šifriranje u bazama podataka. Definirani su osnovni pojmovi šifriranja podataka i šifriranja u bazama podataka te je definiran njihov model prijetnje. Nadalje, opisano je šifriranje u bazi podataka Postgres, dan je pregled arhitekture Postgresa, dostupne metode šifriranja i primjerom je pokazano kako implementirati šifriranje u Postgresu. Zadnji dio rada bavi se temom koliko napadači na bazi podataka i na komunikacijskom putu mogu saznati informacija. Konačno, proveden je eksperiment kojem je cilj utvrditi koliko precizno se može otkriti koliko je redaka iz baze vraćeno kao odgovor na upit.

Abstract (english)

The emphasis of this thesis is database encryption. The basic concepts of data encryption, encryption in databases and its threat model are defined. Furthermore, encryption in Postgres database engine is described and an overview of the Postgres architecture is provided, as well as the encryption methods available. Also, an example of how to implement encryption in Postgres is presented. The last part of the thesis deals with the topic of how much information can attackers which are situated on the database and on the communication path uncover. Finally, an experiment was conducted to determine how accurately can the number of rows returned by a query response be detected.

• Keywords: šifriranje; baze podataka; model prijetnje; Postgres; PostgreSQL; zaštita; slabosti kriptografske zaštite
• Keywords (english): encryption; database; threat model; Postgres; PostgreSQL; protection; weaknesses of cryptographic protection
• Language: croatian
• URN:NBN: urn:nbn:hr:168:731571
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 09:30:09