Zaštita upravljačkih sučelja u uređajima Interneta stvari

undergraduate thesis

• Title (english): Protection of control interfaces in Internet of things devices
• Author: Hrvoje Kristić
• Mentor: Marin Vuković (mentor)
• Committee member: Marin Vuković (predsjednik povjerenstva)
• Committee member: Ivona Brajdić (član povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-05, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

IoT uređaji mnogima su danas dio svakodnevice te su na sebe privukli pažnju napadača.
Porast broja uređaja interneta stvari doveo je do potrebe za zaštitom sučelja takvih uređaja.
Rad se bavi prikazivanjem poznatih napada koji iskorištavaju lošu konfiguraciju uređaja
interneta stvari. Nakon prikaza poznatih napada obrađuje se jedan primjer zaštite takvih
sučelja te se prikazuje ranjivost Mirai napada. Također opisani su alati za traženje i
iskorištavanje ranjivosti. Zadnji dio rada obuhvaća primjere ranjivosti koje bi napadači
iskoristili da dobiju neke informacije o samom uređaju ili da preuzmu kontrolu nad njim.

Abstract (english)

IoT devices are a part of everyday life for many today and because of that they have attracted
the attention of attackers. Increase in number of Internet of things devices has led to the need
to protect interfaces of such devices. The paper deals with the presentation of well known
attacks which target devices with poor configuration. After presentation of popular IoT
attacks, one example of protection from such attacks is described as well as one vulnerability
of Mirai attack. Furthermore I described tools that are used for finding and exploiting
vulnerabilities. The last part of the paper includes examples of vulnerabilities that attackers
would use to get some information about the device itself or to take control of it.

• Keywords: IoT; Mirai; botnet; Bashlite; Mozi; C&C poslužitelj; Nmap; Owasp Zap; OpenVAS
• Keywords (english): IoT; Mirai; botnet; Bashlite; Mozi; C&C server; Nmap; Owasp Zap; OpenVAS
• Language: croatian
• URN:NBN: urn:nbn:hr:168:640661
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 20:53:04