Evaluacija rješenja za zaštitu krajnjih uređaja od kibernetičkih ugroza u poslovnom okruženju

master's thesis

• Title (english): Evaluation of Endpoint Cyber Protection Solutions for Businesses
• Author: Matko Đurić
• Mentor: Ivan Cvitić (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Committee member: Ivan Grgurević (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2024-09-27, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Unatoč napretku u razvoju sigurnosnih rješenja, kibernetičke prijetnje usmjerene na krajnje
uređaje i dalje predstavljaju ozbiljan izazov za organizacije. Ovaj diplomski rad bavi se
evaluacijom rješenja za zaštitu krajnjih uređaja, s naglaskom na sustave za detekciju i odgovor
na prijetnje. Korištenjem MITRE ATT&CK okvira, simuliran je napad napredne ustrajne
prijetnje grupe Turla, primjenom jedanaest različitih taktika. Provedene simulacije omogućile
su procjenu učinkovitosti sigurnosnih sustava u detekciji i odgovoru na sofisticirane napade.
Dobiveni rezultati ukazuju na snage i slabosti postojećih sigurnosnih sustava te naglašavaju
potrebu za njihovim kontinuiranim razvojem. Zaključci rada ističu važnost integracije
naprednih metoda analize ponašanja i strojnog učenja u sustave za kibernetičku sigurnost.

Abstract (english)

Despite advancements in security solutions, cyber threats targeting endpoints continue to pose
a significant challenge for organizations. This thesis focuses on the evaluation of endpoint
protection solutions, with an emphasis on Endpoint Detection and Response systems. Using the
MITRE ATT&CK framework, an attack by the Advanced Persistent Threat group Turla was
simulated, utilizing twelve different tactics. The simulations provided insights into the
effectiveness of security systems in detecting and responding to sophisticated attacks. The
results highlight the strengths and weaknesses of current security solutions and underscore the
need for their continuous development. The conclusions emphasize the importance of
integrating advanced behavioural analysis methods and machine learning into cybersecurity
systems.

• Keywords: Kibernetička sigurnost; Simulacija napada; sustavi za detekciju i odgovor na prijetnje; MITRE ATT&CK; Poslovno okruženje
• Keywords (english): Cybersecurity; Attack simulation; Endpoint Detection and Response; MITRE ATT&CK; Enterprise environment
• Language: croatian
• URN:NBN: urn:nbn:hr:119:959740
• Study programme: Title: Transport; specializations in: Road Transport, Rail Transport, Water Transport, Air Transport, Postal Transport, Information and Communication Traffic, Urban Transport; Course: Road Transport; Study programme type: university; Study level: graduate; Academic / professional title: sveučilišni/a magistar/magistra inženjer/inženjerka prometa (sveučilišni/a magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2024-11-29 14:42:34