Etičko hakiranje i informacijska sigurnost

master's thesis

• Title (english): Ethical hacking and information security
• Author: Karla Lojen
• Mentor: Krešimir Pavlina (mentor)
• Committee member: Tomislav Ivanjko (predsjednik povjerenstva)
• Committee member: Ana Pongrac Pavlina (član povjerenstva)
• Granter: University of Zagreb; Faculty of Humanities and Social Sciences; (Department of information and Communication sciences); Zagreb
• Defense date and country: 2020-07-06, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Information and Communication Sciences

Abstract

Informacijska i računalna sigurnost usko se vežu uz informatički sektor, ali postaju sve važniji aspekt u svakodnevnom životu budući da se razvojem tehnologije sve više podataka pohranjuje u informacijskim sustavima i ti se podaci razmjenjuju raznim komunikacijskim kanalima. orisnici često nisu svjesni potencijalnih prijetnji kojima su okruženi pa dolazi do sigurnosnih propusta i zlouporabe podataka. Povreda nanesena od strane računalnog kriminala je velika te je bitno pravovremeno reagirati kako ne bi došlo do velikih financijskih gubitaka pa tako i podatkovnih.

Računala i internet danas su dio svakodnevnog života stoga je potrebno biti upoznat s mogućim prijetnjama, pratiti trendove i osigurati se na adekvatan način. Etičko hakiranje jedan je od načina koji se trudi educirati i povećati sigurnost korisnika. Osim pojma Etičkog hakiranja, bitno je educirati i osvještavati korisnika o računalnim prijetnjama kroz razne kampanje i projekte bazirane na računalnoj sigurnosti i sigurnosti na Internetu.

Otkrivanjem ranjivosti uklanjaju se sigurnosni nedostaci sustava i povećava informacijska sigurnost korisnika. Kroz ovaj rad bit će opisane vrste hakera i hakerskih napada. Primarno će biti opisani etički hakeri te koji su alati i vještine potrebni za etičko hakiranje, a zatim ćemo se dotaknuti informacijske sigurnosti, sigurnosnih propusta i načini provjere ranjivosti. Za kraj ćemo se upoznati se s pojmom penetracijskog testiranje i usporediti neke od alata za penetracijsko testiranje.

Abstract (english)

Information and computer security are closely linked to the IT sector, but they are becoming an increasingly important aspect in daily life since technology is improving and more and more information is stored in information systems and this information is exchanged through various communication channels. Users are often unaware of the potential threats they are surrounded by, resulting in security vulnerabilities and data misuse. The harm caused by cybercrime is great and it is important to react in a timely manner so that no major financial and data losses are involved.

Computers and the Internet are now a part of everyday life so it is needed to be aware of possible threats, to monitor trends, and secure yourself appropriately. Ethical hacking is one way that seeks to educate and increase user security. In addition to the concept of Ethical hacking, it is important to educate users about computer threats through various campaigns and projects based on computer security and security on the Internet.

Vulnerability detection eliminates system security flaws and increases information security of users. Throughout this paper, types of hacking and hacking attacks will be described. Ethical hackers will be primarily described and what tools and skills are needed for ethical hacking, also we will argue on information security, security vulnerabilities and ways to seek for vulnerabilities. In the end we will be introduced to the concept of penetration testing and compare some of the tools for pentest.

• Keywords: sigurnost; etičko hakiranje; ranjivosti; tehnologija
• Keywords (english): security; ethical hacking; vulnerabilities; technology
• Language: croatian
• URN:NBN: urn:nbn:hr:131:592482
• Study programme: Title: Information Sciences; specializations in: Computer Science (Teaching, Research), Informatology, Information Sciences (teaching), Information Sciences (research); Course: Computer Science (Teaching, Research); Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra informacijskih znanosti (magistar/magistra informacijskih znanosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Access restricted to authenticated users
• Created on: 2020-07-07 11:02:58