Analiza tehnika i alata ljubičastog tima u svrhu unaprjeđenja sigurnosti u organizacijama

master's thesis

• Title (english): Analysis of Purple Team Techniques and Tools for Improving Security in Organizations
• Author: Luka Paun
• Mentor: Dragan Peraković (mentor)
• Mentor: Ivan Opačak (komentor)
• Committee member: Marko Periša (predsjednik povjerenstva)
• Committee member: Ivan Cvitić (član povjerenstva)
• Committee member: Ivan Grgurević (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2023-07-04, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Ovaj diplomski rad prikazuje tehnike i alate ljubičastog tima u svrhu unaprjeđenja sigurnosti u organizacijama. Ljubičasti tim je metodologija u informatičkoj sigurnosti u kojoj stručnjaci za ofenzivnu sigurnost, takozvani crveni tim, i stručnjaci za defenzivnu sigurnost, takozvani plavi tim, blisko surađuju kako bi poboljšali sigurnosni stav organizacije kroz kontinuirane povratne informacije i razmjenu znanja. Cilj rada je pojasniti pojam ljubičastog tima, njihovu metodologiju te alate i tehnike koje se koriste u svrhu unaprjeđenja sigurnosti u organizacijama. Praktični dio prikazati će proces postavljanja napadačke i ranjive virtualne mašine, iskorištavanja ranjivosti te korake otklanjanja i zakrpa ranjivosti uz pomoć informacija dobivenih iz raznih alata.

Abstract (english)

This master thesis presents techniques and tools of the Purple Team for the purpose of improving security in organizations. Purple Teaming is a methodology in IT security where offensive experts, the so-called red team, and defensive security experts, the so-called blue team, work closely together to improve the organization’s security posture through continuous feedback and knowledge sharing. The aim of this work is to explain the concept of the Purple Team, their methodology, as well as the tools and techniques used to improve security in organizations. The practical part will show the process of setting up the attacker and vulnerable virtual machines, vulnerability exploitation and finally, mitigation and patching with the help of information gained from security tools.

• Keywords: ljubičasti tim; poboljšanje sigurnosti; kibernetička sigurnost
• Keywords (english): Purple Team; Improving security; Cybersecurity
• Language: croatian
• URN:NBN: urn:nbn:hr:119:461063
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2023-07-14 10:33:56