Avtomatizacija beleženja ranljivosti organizacij

nov pristop k preprečevanju napadov z uporabo javno dostopnih podatkov

Samo Pungaršek Pritržnik (Author), David Modic (Mentor)

Abstract

V diplomski nalogi smo predstavili, kaj so javno dostopni podatki in kako se uporabljajo v različnih situacijah. Poudarek smo postavili na vlogo, ki jo predstavljajo javno dostopni podatki v področju varnosti ter kako lahko to vpliva na ranljivosti organizacij. Pri raziskovanju smo se osredotočili na orodji SpiderFoot in Maltego, ki sta nam pomagali identificirati človeške ranljivosti. Ta orodja smo aplicirali na izdelanem modulu, ki nas je obvestil o potencialnih grožnjah za podane organizacije. Analiza in uporaba teh orodij nam je omogočala boljše razumevanje in prepoznavo vzorcev zlorabe podatkov. Skozi praktične primere smo demonstrirali, kako je mogoče z analitičnim pristopom izboljšati varnostna pravila in zmanjšati tveganja, povezana z zlorabo podatkov v organizacijah

Keywords

javno dostopni podatki;OSINT;socialni inženiring;kibernetska varnost;visokošolski strokovni študij;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2024
Typology:	2.11 - Undergraduate Thesis
Organization:	UL FRI - Faculty of Computer and Information Science
Publisher:	[S. Pungaršek Pritržnik]
UDC:	004.056(043.2)
COBISS:	212782083
Views:	42
Downloads:	1
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Automating the Documentation of Organizational Vulnerabilities: A Novel Approach to Attack Prevention Leveraging Publicly Available Data
Secondary abstract:	In this thesis, we presented what publicly available data is and how it is used in various situations. We focused on the role that publicly available data plays in the field of security and how it can impact organizational vulnerabilities. Our research is centered on the tools SpiderFoot and Maltego, which helped us identify human vulnerabilities. These tools were applied to a developed module that notified us of potential threats to the specified organizations. The analysis and use of these tools allowed us to better understand and recognize patterns of data misuse. Through practical examples, we demonstrated how an analytical approach can improve security policies and reduce risks associated with data misuse in organizations.
Secondary keywords:	open source intelligence;OSINT;social engineering;cyber security;computer science;diploma;Varstvo podatkov (računalništvo);Varnost računalniških sistemov;Kibernetski terorizem;Računalništvo;Univerzitetna in visokošolska dela;
Type (COBISS):	Bachelor thesis/paper
Study programme:	1000470
Thesis comment:	Univ. v Ljubljani, Fak. za računalništvo in informatiko
Pages:	1 spletni vir (1 datoteka PDF (55 str.))
ID:	25443796