20.500.12556/DKUM-76423 Vloga ponudnikov telekomunikacijskih storitev pri odkrivanju in preprečevanju napadov za porazdeljeno zavrnitev storitev magistrsko delo The role of telecommunications service providers in detecting and preventing distributed denial of service attacks Napadi DDoS (napadi za porazdeljeno zavrnitev storitev) sodijo med najbolj razširjene kibernetske grožnje, ki predstavljajo visoko tveganje za neprekinjeno delovanje informacijskih sistemov. Pomembno vlogo v sistemu odzivanja imajo upravljavci internetne infrastrukture, ki nadzirajo internetni promet. Visoka razširjenost napadov DDoS se pripisuje predvsem vse večji uporabi internetnih storitev, digitalizaciji družbe in gospodarstva ter pomanjkanju investicij v sodobnejše varnostne mehanizme. Pregled literature nakazuje na pomanjkanje znanstvenih raziskav o aktualnih izzivih in učinkovitih pristopih k soočanju z napadi DDoS, še posebej skozi prizmo ponudnikov telekomunikacijskih storitev. Namen magistrskega dela je proučiti trende na področju napadov DDoS in vlogo ponudnikov telekomunikacijskih storitev pri soočanju s tovrstno grožnjo. Skladno s tem je bila izvedena dvodelna raziskava, s katero se je ugotavljalo stanje napadov DDoS v Sloveniji, analizirane so bile vloga in rešitve ponudnikov telekomunikacijskih storitev v sistemu odzivanja ter njihove izkušnje. V prvem delu je bila izvedena študija primerov realnih napadov DDoS, v drugem delu pa intervjuji s strokovnjaki iz prakse. Rezultati kažejo, da se v Sloveniji ponudniki telekomunikacijskih storitev najpogosteje soočajo z volumetričnimi napadi DDoS manjšega obsega, med najbolj izpostavljene pa sodijo protokoli na transportnem sloju. Ponudniki telekomunikacijskih storitev ustrezno skrbijo za nadzor in omejevanje internetnega prometa, prav tako ponujajo dodatne storitve anti-DDoS, medtem ko naprednejših varnostnih mehanizmov še ne uporabljajo. Izvirnost magistrskega dela je v sistematični proučitvi narave tovrstne kibernetske grožnje in analizi njene pojavnosti v Sloveniji. DDoS attacks (distributed denial of service attacks) are among the most widespread cyber threats, posing a high risk to the continuous operation of information systems. An important role in the response system is played by Internet infrastructure managers who control Internet traffic. The growing scale of DDoS attacks is mainly due to the ever-increasing internet services usage, digitalization of society and economy as well as lack of investments in modern security mechanisms. Moreover, a literature review indicates a lack of scientific research on challenges and effective approaches in dealing with DDoS attacks, especially through the prism of telecommunications service providers. The purpose of the master's thesis is to study trends in the field of DDoS attacks and the role of telecommunications service providers in dealing with this type of threat. A two-part research was conducted to determine the state of DDoS attacks in Slovenia, analyse the role of telecommunications service providers in responding to DDoS attacks, and their experience. In the first part, a case study of real-world DDoS attacks was performed, and in the second part, interviews with experts were conducted. The results show that telecommunication service providers in Slovenia most often face small-scale volumetric DDoS attacks exploiting transport layer protocols. Telecommunications service providers take due care to control and restrict Internet traffic, when needed. They also provide additional anti-DDoS services but lack more advanced security mechanisms. The originality of the master's thesis lies in the systematic study of the nature of this type of cyber threat and the analysis of its occurrence in Slovenia. telekomunikacije telekomunikacijske storitve ponudniki kibernetska varnost napadi DDos zaznavanje odzivanje magistrska dela DDoS attack telecommunication service providers cyber security detection response true true false [K. Stojchevska] Slovenski jezik Angleški jezik Magistrsko delo/naloga 2020-05-21 21:19:22 2020-06-08 15:30:39 2022-08-09 13:33:06 2020-06-09 03:14:07 2020 0 Ljubljana 2020 Ljubljana V, 77 str., [4] str. pril. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 621.39+004.056(043.2) 18525699 URN:SI:UM:DK:AD2CCD6X MAG_Stojchevska_Kristina_2020.pdf MAG_Stojchevska_Kristina_2020.pdf 1 E624180E06F2D224737C9C057604311D ef19d314d1dd51884205b91ec1e0e94082edfdbeffc56beca2dc672061692e63 52c49dc9-7c11-11eb-bb7a-00155d0001ca 20.500.12556/dkum/f0d13c6a-3330-4a55-97a4-f833d8ed14c1 https://dk.um.si/Dokument.php?lang=slv&id=142325 Fakulteta za varnostne vede 0 0 0