Principi i provedba napada tipa čovjek u sredini u bežičnim lokalnim mrežama

master's thesis

• Title (english): The principles and implementation of the man-in-the-middle attack in wireless local area networks
• Author: Zdravko Ostojić
• Mentor: Željko Ilić (mentor)
• Committee member: Željko Ilić (predsjednik povjerenstva)
• Committee member: Mladen Kos (član povjerenstva)
• Committee member: Marin Šilić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2016-07-04, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

Bežične lokalne mreže postale su primaran način povezivanja računala u domovima i industriji. Uslijed značajnih sigurnosnih propusta u ranijim verzijama sigurnosnih standarda, poseban je naglasak stavljen na sigurnosne mehanizme bežičnih lokalnih mreža. Napadi na sigurnosne mehanizme klasificirani su kao napadi izvana i napadi iznutra. Kod napada iznutra autorizirani zlonamjerni korisnik čini štetu ili prikuplja povjerljive informacije o korisnicima ili mrežnoj infrastrukturi. Jedan od napada iznutra je i napad tipa čovjek u sredini koji se temelji na presretanju mrežnog prometa uslijed iskorištavanja propusta u dizajnu mrežnih protokola. Jedan od najraširenijih protokola u lokalnim mrežama, protokol ARP posjeduje propuste u dizajnu koji omogućavaju uspostavljanje lažnog preslikavanja IP adresa u pripadajuće MAC adrese. Na temelju navedenog propusta stvoreno je nekoliko varijanata napada tipa čovjek u sredini.

Abstract (english)

Wireless local area networks have become the primary connecting technique in both home and industrial environment. Due to serious vulnerabilities in prior security standards, a special attention has been put upon security mechanisms implemented in wireless local area networks. The attacks on wireless security can be classified as internal or external. In the internal attacks, an authorized malicious user creates damage either to other users or to network infrastructure. One of these internal attacks is known as man-in-the-middle attack and it's based on redirecting network traffic through the attacker’s computer as a result of security oversights in the design of network protocols. One such protocol is the Address Resolution Protocol which allows an attacker to create false mapping between IP address and the corresponding MAC address of the victim. Based on this vulnerability, several variants of man-in-the-middle attack have been proposed.

• Keywords: Telekomunikacije; bežične lokalne mreže; sigurnosni napadi; sigurnosni propusti; čovjek u sredini
• Keywords (english): Telecommunications; wireless local area network; WLAN; security; vulnerabilities; man-in-the-middle; MiTM
• Language: croatian
• URN:NBN: urn:nbn:hr:168:953038
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2018-02-06 11:01:30