Analiza varnosti sistema AuthQ

magistrsko delo

Maša Završnik (Avtor), Borut Werber (Mentor)

Povzetek

V magistrski nalogi smo se poglobili v analizo varnosti sistema AuthQ, ki je vstopil na trg kot odgovor na naraščajočo potrebo po rešitvah na področju digitalne varnosti. V današnjem hitro napredujočem digitalnem okolju, ko tehnološki mejniki padajo skoraj vsak dan, se postavlja nujno vprašanje, kako zagotoviti, da novi inovativni produkti, kot je AuthQ, ne samo izpolnjujejo, ampak presegajo najvišje standarde varnosti in zaupanja. Spletne grožnje nenehno nastajajo, zato je nujno, da se vsi vidiki sistema temeljito preverijo in ovrednotijo, še preden se produkt ponudi v uporabo. Naša prva naloga je bila prepoznati ključne standarde, ki jih AuthQ mora doseči, da bi se lahko učinkovito certificiral in svojim uporabnikom zagotovil visoko stopnjo zaupanja. Hkrati smo analizirali raznovrstne pristope za testiranje varnosti sistema, saj le testiranje omogoča odkritje morebitnih ranljivosti in njihovo pravočasno odpravo. Takšen pristop zagotavlja, da AuthQ ni le obetaven na papirju, ampak ima trdno podlago za svoj razvoj. Nadaljnja faza je obsegala varnostno analizo sistema, ki je zajemala prepoznavanje morebitnih groženj, oceno tveganja in analizo po metodologiji DREAD. To nam je omogočilo jasen vpogled v morebitne šibke točke sistema in kritična področja, ki zahtevajo posebno pozornost. Celosten pristop k analizi varnosti nam omogoča, da zaznamo morebitne težave in se ustrezno pripravimo na njihovo reševanje. S končnimi sklepi in podprto s SWOT-analizo smo se lotili vprašanja prihodnjega razvoja AuthQ. Ugotovili smo, da je ta produkt perspektiven in vreden nadaljnjega razvoja v okolju, kjer je varnost ključna. Obenem smo se zavedali, da se pojavljajo izzivi, ki zahtevajo preudarnost in strategijo. Prilagajanje zakonodaji, sodelovanje s strokovnjaki za testiranje in vzdrževanje certifikacij so ključni elementi, ki bodo omogočili AuthQ, da ostane odgovor na zahtevne izzive digitalne dobe tudi v prihodnosti.

Ključne besede

standardi kakovosti;eIDAS;varnost na spletu;SSL-certifikati;

Podatki

Jezik:	Slovenski jezik
Leto izida:	2023
Tipologija:	2.09 - Magistrsko delo
Organizacija:	UM FOV - Fakulteta za organizacijske vede
Založnik:	[M. Završnik]
UDK:	004
COBISS:	174472963
Št. ogledov:	13
Št. prenosov:	1
Ocena:	0 (0 glasov)
Metapodatki:

Ostali podatki

Sekundarni jezik:	Angleški jezik
Sekundarni naslov:	Analyzing the security of the authq system
Sekundarni povzetek:	In our master's thesis, we delved into a comprehensive analysis of the security system AuthQ, which entered the market as a response to the growing need for advanced solutions in digital security. In today's rapidly advancing digital environment, where technological milestones are being reached almost every day, the critical question arises of how to ensure that new innovative products, like AuthQ, not only meet but exceed the highest standards of security and trust. Online threats are constantly evolving, making it crucial for all aspects of the system to be thoroughly examined and evaluated before the product is offered for use. Our first task was to identify the key standards that AuthQ must achieve in order to effectively certify itself and provide a high level of trust to its users. We analyzed various approaches for testing the security of the system, as only testing allows for the discovery of potential vulnerabilities and their timely rectification. Such an approach ensures that AuthQ is not only promising on paper but has a solid foundation for its development. The next phase involved a security analysis of the system, encompassing the identification of potential threats, risk assessment, and a deep dive analysis using the DREAD methodology. This provided us with a clear insight into potential weak points of the system and critical areas that require special attention. A holistic approach to security analysis enables us to anticipate potential issues and adequately prepare for their resolution. With final conclusions supported by a SWOT analysis, we approached the question of AuthQ's future development. We found that it is promising and worth further development in an environment where security is paramount. Simultaneously, we acknowledged that challenges arise, demanding prudence and strategy. Adapting to legislation, collaborating with security testing experts, and maintaining certifications are key elements that will enable AuthQ to remain a response to the demanding challenges of the future.
Sekundarne ključne besede:	Varnost sistemov;Univerzitetna in visokošolska dela;
Vrsta dela (COBISS):	Magistrsko delo/naloga
Komentar na gradivo:	Univ. v Mariboru, Fak. za organizacijske vede
Strani:	VIII, 90 f.
ID:	19889275