Metodologija penetracijskog testiranja

master's thesis

• Title (english): Penetration testing methodology
• Author: Leon Cetinić
• Mentor: Dragan Peraković (mentor)
• Committee member: Ivan Grgurević (predsjednik povjerenstva)
• Committee member: Ivan Cvitić (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2021-09-22, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Svrha ovog rada je analizirati i prikazati saznanja o penetracijskom testiranju kao načinu zaštite informacijskih sustava te definirati metodologiju penetracijskog testiranja. Proces testiranja provodi se pomoću faze pripreme i prikupljanja informacija te izvršavanja napada nad sustavom i analiziranjem podataka dobivenih kroz cjelokupno istraživanje. Cilj rada je prikazati postupak penetracijskog testiranja primjenom praktičnog dijela diplomskog rada, gdje će se provesti testiranje nad virtualnim okruženjem koristeći metode i alate opisane u radu. Praktični dio rezultirat će određenim ranjivostima sustava za koja će se ponuditi sigurnosna rješenja, dok će se kroz teorijski dio opisati metodologija izvođenja i analiza ponuđenih rješenja.

Abstract (english)

The purpose of this paper is to analyze and present the findings about penetration testing as a way of protecting information systems and to define the methodology of penetration testing. The testing process is carried out through the stages of preparation and collection information, execution attacks on the system and analysis of data obtained throughout the research. The aim of the paper is to present the procedure of penetration testing by applying the practical part of the thesis, where testing in a virtual environment will be conducted using the methods and tools described in the paper. The practical part will result in certain vulnerabilities of the system for which security solutions will be offered, while the theoretical part will describe the methodology of implementation and analysis of the offered solutions.

• Keywords: penetracijsko testiranje; metodologija; prikupljanje podataka; vektori napada; sigurnost informacijskog sustava
• Keywords (english): penetration testing; methodology; collecting information; vector attacks; information system security
• Language: croatian
• URN:NBN: urn:nbn:hr:119:515393
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2021-10-25 14:38:27