Validacija sigurnosti bežične pristupne točke s ciljem sprječavanja pristupa osjetljivim informacijama

master's thesis

• Title (english): Security Validation of Wireless Access Point with Purpose of Preventing Access to Sensitive Information
• Author: Borna Pozojević
• Mentor: Dragan Peraković (mentor)
• Committee member: Ivan Grgurević (predsjednik povjerenstva)
• Committee member: Zvonko Kavran (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2018-05-08, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Glavna prednost, a istovremeno i značajan sigurnosni nedostatak bežičnih lokalnih računalnih mreža, je činjenica da se područje pokrivanja ne može kontrolirati kao i u žičanoj infrastrukturi. Standard za bežičnu komunikaciju naziva IEEE 802.11, omogućuje pristup mreži informacijsko komunikacijskog sustava čak i izvan područja zgrade ili objekta u kojoj se ona koristi. Povezivanjem na bežičnu infrastrukturu, napadaču je omogućeno daljnje napredovanje kroz sustav i ugrožavanje osjetljivih informacija koje on sadrži. Validacija sigurnosti informacijsko komunikacijskog sustava, jedan je od načina provjere implementiranih mjera zaštite u sustavu. Poznat još i kao penetracijsko testiranje, postupak je autoriziranog napada na sustav od strane izvođača testa. U radu je analiziran postupak penetracijskog testiranja informacijsko komunikacijskog sustava, napadom na uređaje u bežičnoj mreži fakulteta te je istraženo kojim informacijama i podacima je moguće pristupiti uporabom raznih alata iz Kali Linux operativnog sustava.

Abstract (english)

The main advantage, and a huge security vulnerability in the wireless network communication standard 802.11, is the fact that network coverage area can't be controlled as in its wired counterpart. This kind of networks can be accessed outside of the area or the building where the network is used, and after that the entire system can be compromised by an attacker in case there are no implemented security controls. Security validation of information and communication systems, also known as penetration testing, is security check of safety measures implemented in the system. It is a simulation of authorized attack performed by a tester who uses tools and thinks like an attacker. This paper analyzes the procedure of penetration testing of the faculty's information system that includes wireless network. The paper describes some possible attacks on other devices in the wireless network and investigates which sensitive information and data that can be acquired, by using various tools from Kali Linux operating system.

• Keywords: 802.11; sigurnost informacijsko komunikacijskih sustava; penetracijsko testiranje; osjetljive informacije
• Keywords (english): 802.11; information and communication systems security; penetration testing; sensitive information
• Language: croatian
• URN:NBN: urn:nbn:hr:119:589412
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Information and Communication Traffic; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2018-05-17 12:02:27