Tehnike odkrivanja in preprečevanja vdorov v spletne aplikacije

diplomsko delo

Boštjan Janžovnik (Author), Domen Verber (Mentor)

Abstract

Pojav interaktivnih in kompleksnejših spletnih aplikacij je s seboj prinesel tudi porast spletnih vdorov, ki so skozi čas postali vse bolj prefinjeni in naprednejši. V tem diplomskem delu so predstavljene nekatere najpogosteje uporabljene tehnike vdiranja. Z namenom odkriti varnostne luknje, ki so dopustile izvedbo napada, ter poiskati najustreznejše varnostne rešitve, ki bi aplikacijo zaščitile pred vnovično izvedbo vdora, so bile tehnike vdiranja preizkušene na naši ranljivi spletni aplikaciji. Po implementaciji varnostnih rešitev je bila testirana njihova učinkovitost in pojasnjen njihov način delovanja.

Keywords

XSS;SQL;spletni napad;varnost spletne aplikacije;

Data

Language:	Slovenian
Year of publishing:	2014
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FERI - Faculty of Electrical Engineering and Computer Science
Publisher:	[B. Janžovnik]
UDC:	004.728.8:004.777(043.2)
COBISS:	18485270
Views:	1029
Downloads:	78
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	TECHNIQUES FOR DETECTING AND PREVENTING INTRUSIONS INTO WEB APPLICATIONS
Secondary abstract:	The emergence of complex and interactive web applications, resulted in rise of web intrusions, which became more sophisticated and advanced over time. This diploma thesis presents some of the most high-profile hacking techniques. In order to detect security holes, which allowed carrying out the attack, and find the most appropriate security solutions that would protect the application from re-execution of the intrusion, hacking techniques have been tested on our vulnerable web application. After the implementation of security solutions, their effectiveness has been tested and explained.
Secondary keywords:	web attacks;web application security;vulnerabilities;XSS;
URN:	URN:SI:UM:
Type (COBISS):	Bachelor thesis/paper
Thesis comment:	Univ. v Mariboru, Fak. za elektrotehniko, računalništvo in informatiko
Pages:	IX, 65 f.
ID:	8731151