Procjena rizika u informacijskim sustavima uzrokovanih korisnikovim neodgovornim pregledavanjem weba

professional thesis

• Title (english): Assessing the risks in information systems caused by user's irresponsible web browsin
• Author: Miroslav Kikić
• Mentor: Stjepan Groš (mentor)
• Committee member: Mario Spremić (predsjednik povjerenstva)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Ivana Bosnić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Internet Web pristup dio je svakodnevnog posla mnogih kompanija. Uz određenu politiku Web pristupa, zaposlenici kompanija su u mogućnosti pristupati različitim Web stranicama, a neki od njih će pristupati i rizičnim Web stranicama. Korisnici svojim neodgovornim pristupom Webu mogu nanijeti financijsku i reputacijsku štetu kompaniji za koju rade. U ovom radu procjenjuje se rizik u informacijskim sustavima uzrokovanih korisnikovim neodgovornim pregledavanjem Weba. Na detektirane rizične korisnike koji se neprilično ponašaju može se preventivno djelovati prema njima podizanjem svijesti o potencijalnim opasnostima. Izvor podataka za izračun rizičnosti koristit će se izravno povezana baza podataka o reputaciji Web stranica i sistemski zapisi antivirusnih programskih alata. Rezultat je lista rizičnih korisnika na koje moguće dodatno edukativno djelovati te pokazatelj koja metoda podizanja svijesti korisnika daje bolje rezultate.

Abstract (english)

For many companies, Internet has become a necessary tool for daily business. With some Web access restrictions, employees can access various Web sites and some of them will access risky Web sites. Irresponsible user Web access behavior can cause financial and reputational damage for the company they work for. This paper presents a risk assessment in information systems caused by the user's irresponsible Web browsing. Identified at-risk users can be prevented in their misbehavior by raising awareness of potential hazards. Online database Website reputation and antimalware logs are available as data source for risk assessment. The result reveals a list of at-risk users that can be further educated and indicates which method of raising awareness has better efficiency.

• Keywords: procjena rizika; reputacija Web stranica; rizični korisnici; edukacija; podizanje svijesti
• Keywords (english): risk assessment; web reputation; at-risk users; education; raising awareness
• Language: croatian
• URN:NBN: urn:nbn:hr:168:964666
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2022-07-06 12:07:48