Poboljšanje kvalitete mamaca za operatora prijenosnog sustava temeljem javno dostupnih podataka

undergraduate thesis

• Title (english): Raising the quality of a honeypot system for a transmission system operator based on publicly available data
• Author: Luka Sever
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Antonio Močinić (član povjerenstva)
• Committee member: Marko Barišić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-07-07, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Mamci su računalni sustavi koji se koriste za privlačenje napadača s ciljem učenja o njihovim metodama.

U radu su opisani ključni pojmovi vezani uz operatere prijenosnih sustava i industrijske upravljačke sustave i dani opisi nekoliko mamaca. Raniji prototip mamca nadograđen je boljim grafičkim sučeljem i neuspješno je dodan čvor koji simulira programibilni logički kontroler. Istražen je pojam javno dostupnih informacija, predstavljeni alati za istraživanje javno dostupnih informacija i dani prijedlozi poboljšanje mamca korištenjem javno dostupnih podataka.

Postoji mnoštvo dostupnih mamaca otvorenog koda različitih razina složenosti. U mrežu je dodan HoneyPLC mamac koji koristi nekoliko zastarjelih biblioteka koje su otežale proces instalacije mamca, i zbog greške u kodu nepoznatog izvora dodani čvor nije funkcionalan.

Abstract (english)

Honeypots are computer systems used for attracting attackers with the goal of learning about their methods.

The paper describes key concepts related to transmission system operators and industrial control systems and gives descriptions of several honeypots. An earlier prototype of a honeypot was upgraded with a better graphical interface and an unsuccessful attempt was made of adding a node that simulates a programmable logic controller. The concept of publicly available data was explored, tools for exploring publicly available data were presented and suggestions for the improvement of the honeypot based on publicly available data were given.

There are many open source honeypots of different levels of complexity. The HoneyPLC honeypot was added to the network, which uses several outdated libraries that made the process of installing the honeypot more difficult, and due to an error in the code of unknown origin, the added node is not functional.

• Keywords: mamac; operater prijenosnog sustava; industrijski upravljački sustav; javno dostupne informacije; PLC
• Keywords (english): honeypot; transmission system operator; industrial control system; open source intelligence; PLC
• Language: croatian
• URN:NBN: urn:nbn:hr:168:520790
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-10-11 10:25:48