diplomsko delo
Abstract
Uporaba interneta je vse bolj razširjena na različnih področjih in za različne
namene. Spletne aplikacije so vse bolj napredne in ponujajo različne uporabniške izkušnje. V ta namen se o uporabniku shranjujejo podatki, ki so
lahko samo neškodljivi piškotki, lahko pa so tudi osebni podatki. Na številnih
spletnih mestih zahtevajo prijavo z uporabniškim imenom in geslom, do katerih bi lahko dobili dostop zlonamerni ljudje in z njimi škodovali spletnim
uporabnikom za svoj dobiček. V diplomskem delu je predstavljena spletna
varnost, oziroma njene pomanjkljivosti. Predstavili smo petnajst različnih
zlonamernih ranljivosti po priporočilih OWASP, nato pa smo jih analizirali
na spletni aplikaciji NOVA Portal. Ta je namenjena pregledu in kreiranju
ponudb ter pogodb za predstavnike in stranke lizing financiranja. Za vsak
napad je opisano delovanje in njegov vpliv na spletni aplikaciji NOVA Portal.
V primeru odkritih varnostnih tveganj je zapisana tudi ustrezna rešitev za
odpravo teh. Ob ustreznem upoštevanju rešitev je mogoče izboljšati spletno
varnost.
Keywords
varnost spletnih aplikacij;spletna varnost;OWASP;visokošolski strokovni študij;diplomske naloge;
Data
Language: |
Slovenian |
Year of publishing: |
2022 |
Typology: |
2.11 - Undergraduate Thesis |
Organization: |
UL FRI - Faculty of Computer and Information Science |
Publisher: |
[A. Debelak] |
UDC: |
004.9:004.774(043.2) |
COBISS: |
129764867
|
Views: |
43 |
Downloads: |
12 |
Average score: |
0 (0 votes) |
Metadata: |
|
Other data
Secondary language: |
English |
Secondary title: |
Vulnerability analysis of web applications |
Secondary abstract: |
The use of the internet is widespread in various fields and for various purposes. Web applications are increasingly advanced and offer many better user
experiences. For this purpose the user data is stored in various forms. There
are implemented only harmless cookies or the personal data is stored. Many
websites require login with a username and password, which malicious people
could gain access to and use to harm online users for their own profit. The
thesis presents the web application security and fifteen critical vulnerabilities
from OWASP recomendations. Afterwards, they are applied on the NOVA
Portal application, which is intended for review and creation of offers and
contracts for representatives and customers of leasing financing. For each
attack, the operation and its impact are described on the NOVA Portal web
application. In case of discovered security risks, it was also written down
the appropriate solution for its elimination. With proper consideration of
solutions, online security can be improved. |
Secondary keywords: |
web applications;web application security;web security;OWASP;computer science;diploma;Spletne aplikacije;Računalništvo;Diplome; |
Type (COBISS): |
Bachelor thesis/paper |
Study programme: |
1000470 |
Embargo end date (OpenAIRE): |
1970-01-01 |
Thesis comment: |
Univ. v Ljubljani, Fak. za računalništvo in informatiko |
Pages: |
37 str. |
ID: |
17023623 |