Razvoj programske podrške za automatsko pružanje usluga u području mrežne sigurnosti

master's thesis

• Title (english): Development of software for automatic provisioning of services in the field of network security
• Author: Vatroslav Pavleković
• Mentor: Željko Ilić (mentor)
• Committee member: Željko Ilić (predsjednik povjerenstva)
• Committee member: Marin Šilić (član povjerenstva)
• Committee member: Adrian Satja Kurdija (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-05, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

U radu je dan pregled nad tehnikama upravljanja mrežom, komunikacijom mrežnih elemenata i vatrozidom kao ključnim uređajem u sigurnosti mreže. Najraširenije centralizirano upravljanje mrežom naziva se programsko upravljanje mrežom (SDN). Mrežni elementi u ovakvoj paradigmi komuniciraju putem otvorenih sučelja, a glavni element je centralna jedinica tj. kontroler. Najpoznatije sučelje za komunikaciju dva softvera je programsko aplikacijsko sučelje (API) koje uz pomoć HTTP zahtjeva postaje vrlo moćan alat za uređivanje postavki mrežnih uređaja. U radu je prikazana konkretna komunikacija i upravljanje nad vatrozidom sljedeće generacije (NGFW) putem API sučelja. S današnjim mogućnostima koje nude skriptni programski jezici uz mnogobrojne biblioteke, ovakvo upravljanje postalo je vrlo jednostavno.

Abstract (english)

This paper gives an overview of network management techniques, communication between network elements and firewall as a key device in network security. The most common approach to centralized network management is called Software-Defined Networking (SDN). Communication between network elements in this model is done through open interfaces and the main element is the central unit which is more known as the controller. Most well-known interface for communication between two different software components is Application Programming Interface (API) which becomes a very powerful tool for editing network device settings by using HTTP requests. The paper presents solution for communication and management of the Next Generation Firewall (NGFW) done via API interface. With today's capabilities offered by scripting languages along with numerous libraries, this kind of management has become very simple.

• Keywords: programsko upravljanje mrežom; programsko aplikacijsko sučelje; reprezentativni prijenos stanja; vatrozid; vatrozid sljedeće generacije
• Keywords (english): software-defined networking; application programming interface; Representational state transfer; firewall; next generation firewall
• Language: croatian
• URN:NBN: urn:nbn:hr:168:043636
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 13:26:00