Analiza kibernetičkih napada temeljenih na metodama socijalnog inženjeringa

master's thesis

• Title (english): Cyber Attack Analysis Based on Social Engineering Methods
• Author: Igor Mikšić
• Mentor: Ivan Cvitić (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Siniša Husnjak (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2021-09-22, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Unatoč dostupnosti naprednih zaštitnih mehanizama, sigurnosni incidenti unutar okruženja pojedinaca i organizacija u kontinuiranom su porastu. Danas najveća prijetnja u svijetu kibernetičke sigurnosti, socijalni inženjering, zasniva se na psihološkom iskorištavanju ljudi kao najslabije karike sustava. U diplomskom radu napadi temeljeni na metodama socijalnog inženjeringa analizirani su kroz detaljan opis obilježja, metoda napada i alata koji se koriste. U svrhu prikaza učinkovitosti takvih napada, primjenom programskih alata dostupnih u Kali Linux okruženju provedene su simulacije dva česta kibernetička napada, simulacija napada krađom identiteta te eksploatacija ciljnog računala stvaranjem backdoor pristupa. Temeljem rezultata provedenih simulacija predložene su smjernice zaštite od napada socijalnog inženjeringa, usmjerene na korisnika pojedinca te sigurnost i poslovanje poduzeća.

Abstract (english)

Despite the availability of advanced protection mechanisms, security incidents within the environment of individuals and organizations are on the rise. Nowadays, the biggest cybersecurity threat in the world, social engineering, is based on the psychological exploitation of people as the weakest link in the system. In this graduate thesis, attacks based on social engineering methods are analyzed through a detailed description of the characteristics, attack methods and used tools. In order to demonstrate the effectiveness of such attacks, using software tools available in the Kali Linux environment, simulations of two common cyber attacks were performed. These are phishing attack and exploitation of the targeted computer by creating a backdoor. Based on the results of the simulations, guidelines for protection against social engineering attacks aimed at the individual user and the security and operation of the company have been proposed.

• Keywords: socijalni inženjering; kibernetički kriminal; kompromitacija sustava; napad krađom identiteta; zlonamjerni softver
• Keywords (english): social engineering; cybercrime; system compromise; phishing; malware
• Language: croatian
• URN:NBN: urn:nbn:hr:119:737968
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2021-10-21 13:18:17