Aspekti sigurnosti web usluge

undergraduate thesis

• Title (english): Web service security aspects
• Author: Ivan Navratil
• Mentor: Dragan Jevtić (mentor)
• Committee member: Dragan Jevtić (predsjednik povjerenstva)
• Committee member: Damjan Katušić (član povjerenstva)
• Committee member: Petar Krivić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-07-03, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U radu su proučene, objašnjene i demonstrirane česte ranjivosti web stranica. Ranjivosti su demonstrirane uporabom virtualnog stroja koristeći operacijske sustave Metasploitable za posluživanje web stranice te operacijski sustav Kali Linux za ispitivanje ranjivosti web stranica. Za sve ranjivosti pokazano je kako nastaju i koja su potencijalna rješenja tog sigurnosnog propusta. Ispitane su sljedeći ranjivosti: ranjivost prikupljanja informacija, ranjivosti kod učitavanja datoteka, ranjivosti izvršavanja koda, ranjivosti uključivanja lokalne i ranjivosti uključivanja udaljene datoteke, SQL injekcija te napad grubom silom.

Abstract (english)

As part of this Bachelor's final project, some security vulnerabilities have been studied, explained, and demonstrated. Vulnerabilities have been demonstrated with the virtual machine using the Metasploitable operating system for hosting a vulnerable website and Kali Linux operating system for testing vulnerabilities. The reason for the occurrence of all vulnerabilities has been explained as well as their potential solutions. Vulnerabilities that have been examined are information gathering vulnerability, file upload vulnerabilities, code execution vulnerabilities, local file inclusion vulnerabilities, remote file inclusion vulnerabilities, SQL injection vulnerability, and brute force attack vulnerability.

• Keywords: ranjivosti web stranica; sigurnost web stranica; web usluge
• Keywords (english): web site vulnerabilities; web site security; web services
• Language: croatian
• URN:NBN: urn:nbn:hr:168:210415
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 21:17:29