20.500.12556/DKUM-76749 SCADA sistemi in segmentacija omrežja diplomsko delo visokošolskega študijskega programa Informacijska varnost SCADA systems and network segmentation Informacijski sistemi so precejšen del vsakdanjega življenja. V to kategorijo so uvrščeni vsi sistemi, ki so kakorkoli povezani z informacijami, strojno in programsko opremo ter omrežjem. Med informacijske sisteme sodijo tudi sistemi SCADA, ki so danes ključni del kritične infrastrukture. Uporabljeni so v skoraj vseh velikih organizacijah, ki za svoje delovanje potrebujejo proizvodne ali druge industrijske obrate. SCADA je sistem za nadzor, vodenje in zbiranje podatkov, običajno pa celoto tvori skupaj s sistemoma ERP in MES, napravami PLC ter senzorji in preostalo strojno opremo. Zaradi njihove nujnosti za normalno delovanje industrijskih obratov in povečanega števila kibernetskih napadov jim stroka že nekaj časa posveča veliko pozornost. V skupino, ki ogroža varnost kritične infrastrukture, so uvrščeni hekerji, organizirani kriminal, notranji napadalci, državno sponzorirani kiberterorizem in e-bojevanje ter pripadniki ideološkega in političnega haktivizma. Da bi zagotovili večjo varnost kritične infrastrukture, se organizacije zatekajo k segmentaciji omrežja, ki lahko bistveno pripomore k zagotavljanju večje varnosti. Implementacija segmentacije omrežja omrežje razdeli na več različnih slojev, ki so ločeni s požarnimi zidovi, s tem pa je zagotovljena večja varnost omrežja. Rezultati diplomskega dela kažejo, da segmentacija omrežja vpliva na izboljšanje varnosti, zaradi velikega omejevanja omrežnega prometa pa lahko prihaja do zapletov ob nadgradnjah in popravilih sistemov, poleg tega lahko nastajajo težave pri komunikaciji med različnimi sloji omrežja. Information systems are a substantial part of our everyday life. All systems related to information, hardware, software, and networks are classified as information systems. SCADA systems, that are nowadays considered as critical infrastructure, are as well listed as information systems. They are being used in almost every large organization having production plants or industrial sites. SCADA is a system responsible for controlling, managing, and collecting data. Ordinarily, it forms a whole with ERP and MES systems, PLC devices, sensors, and other hardware. Due to the importance of these systems for production plants to work undisturbedly, and an increasing number of cybernetic attacks, specialists devote great attention to such systems. Hackers, organized criminals, insider attackers, cyberwarfare, e-warfare, and members of ideological and political hacktivism, are all considered as a threat to the security of the critical infrastructure. In order to improve security of the critical infrastructure, organizations often resort to network segmentation, which can essentially improve security assurance. Implementing network segmentation separates the network into multiple layers divided by firewalls, therefore increasing the level of network security. The results of the thesis show, that network segmentation does contribute to increased security, although due to limitation of network bandwidth, it can cause difficulties when upgrading or repairing the system, moreover, it can lead to communication problems between different network layers.   diplomske naloge SCADA segmentacija varnost sistemi omrežje SCADA segmentation security system network true true false [A. Mihičinac] Slovenski jezik Angleški jezik Diplomsko delo/naloga 2020-06-30 11:47:27 2020-09-01 09:19:03 2022-08-09 13:55:42 2020-09-02 03:20:36 2020 0 Ljubljana 2020 Ljubljana VII, 38 str. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.056(043.2) 26736899 URN:SI:UM:DK:7IW6GO7B VS_Mihicinac_Anja_2020.pdf VS_Mihicinac_Anja_2020.pdf 1 F56F32A5BFBA2E325C1F777873D58585 f01ee110ca5f412448d14c7c448d1b975b31ba6a84015191b335703fe00d4289 68a0ccf9-7c11-11eb-bb7a-00155d0001ca 20.500.12556/dkum/75f2578a-b19e-4c36-8756-e5049abd8524 https://dk.um.si/Dokument.php?lang=slv&id=143566 Fakulteta za varnostne vede 0 0 0