Pojavnost ribarjenja v slovenskih podjetjih

diplomsko delo visokošolskega študijskega programa Informacijska varnost

Aleš Matjaž (Author), Marko Hölbl (Mentor)

Abstract

Spletno ribarjenje je vrsta kibernetskega napada, pri katerem napadalec načrtno zavede žrtev, da napadalcu razkrije različne občutljive podatke. Z napadi si napadalci prilastijo zaupne podatke, ki predvsem za podjetja predstavljajo veliko vrednost. Napadalci pri napadih ribarjenja uporabljajo metode socialnega inženiringa, pri tem pa po raznih e-poštnih sporočilih, SMS-i, glasovnimi sporočili in mnogo drugimi metodami zavajajo žrtev. Ciljne tarče napadov ribarjenja niso le posamezniki, temveč tudi vsa podjetja, ki težko zagotovijo celovito informacijsko varnost in s tem preprečijo napad. V diplomskem delu je bila opravljena raziskava o pojavnosti napadov ribarjenja v slovenskih podjetjih, v katero je bilo zajetih 77 podjetij, ki delujejo na ozemlju Slovenije. Ugotovitve kažejo, da so podjetja v Sloveniji konstantno na udaru napadov ribarjenja, prav tako pa so uspešna pri njihovem preprečevanju. Z nenehnim izobraževanjem zaposlenih, ob urejanju varnostne politike in ob urejenem oddelku za informacijsko varnost so podjetja uspešna pri preprečevanju uspešnosti napadov ribarjenja, na kar kaže tudi podatek, da 93 % vprašanih še ni utrpelo finančne izgube ob napadih ribarjenja. Slovenska podjetja so najpogosteje tarča napadov ribarjenja po e-pošti, sledijo napadi po SMS-sporočilih in napadi glasovnega ribarjenja.

Keywords

ribarjenje;napadi;informacijska varnost;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2024
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FVV - Faculty of Criminal Justice
Publisher:	[A. Matjaž]
UDC:	004.056.53(043.2)
COBISS:	198237187
Views:	21
Downloads:	0
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Occurance of phishing in Slovenian companies
Secondary abstract:	Web phishing is a type of cyber-attack in which the attacker deliberately deceives the victim into revealing various sensitive information to the attacker. The attacks are used by the attackers to steal confidential information, which are of great value. Attackers use social engineering methods in phishing attacks, deceiving the victim through various emails, SMS, voice messages and many other methods. However, the targets of phishing attacks are not only individuals, but also entire companies, which find it difficult to provide comprehensive information security to prevent an attack. In the thesis, a survey on the incidence of phishing attacks in Slovenian companies was carried out, covering 77 companies operating in Slovenia. The findings show that companies in Slovenia are consistently targeted by phishing attacks, but are also successful in preventing them. With constant employee training, security policies and a well-organised information security department, companies are successful in preventing successful fishing attacks, as shown by the fact that 93% of respondents have not yet suffered a financial loss from a fishing attack. Slovenian companies are most often targeted by email phishing attacks, followed by SMS and voice phishing attacks.
Secondary keywords:	Phishing prevare;Podjetja;Univerzitetna in visokošolska dela;
Type (COBISS):	Bachelor thesis/paper
Thesis comment:	Univ. v Mariboru, Fak. za varnostne vede, Ljubljana
Pages:	VIII f., 52 str.
ID:	24168135