Uporaba varnostno operativnega centra za zaščito kritične infrastrukture : magistrsko delo

Gjergjek, Sašo

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	Uporaba varnostno operativnega centra za zaščito kritične infrastrukture : magistrsko delo
Authors:	ID Gjergjek, Sašo (Author) ID Markelj, Blaž (Mentor) More about this mentor...
Files:	MAG_Gjergjek_Saso_2020.pdf (1,27 MB) MD5: F35F0FB80109F86A1581BDCEA4D8443F PID: 20.500.12556/dkum/b85d0b34-e1ee-414e-a774-0dff33882ef4
Language:	Slovenian
Work type:	Master's thesis/paper
Typology:	2.09 - Master's Thesis
Organization:	FVV - Faculty of Criminal Justice and Security
Abstract:	Nenehen razvoj tehnologije in kibernetskega prostora vabi podjetja, organizacije in posameznike še k večji uporabnosti. S tem se povečuje tudi število groženj, katerih škodljiva programska oprema postaja čedalje bolj kompleksnejša in odpornejša na odkritje in odstranjevanje, povzročajo pa večje škode. Tudi sami »hekerji« postajajo iznajdljivejši pri samem vdiranju v informacijske sisteme, pri tem pa jih je še težje odkriti, saj uničujejo sledi dejavnosti. Zagotavljanje informacijske in kibernetske varnosti je ključnega pomena predvsem v tistih organizacijah oziroma v podjetjih, kjer so škode lahko nepredstavljive in kjer lahko pride celo do smrtnih žrtev. Ene izmed teh so kritične infrastrukture, kjer varnost dajejo na prvo mesto. Namen magistrske naloge je raziskati varnostno operativni center, ki ga uporabljajo za varnost kritične infrastrukture v Sloveniji. Ugotavljali bomo sestavo in učinkovitost delovanja varnostno operativnega centra v treh različnih kritičnih infrastrukturah, in sicer v elektroenergetskem, telekomunikacijskem ter zdravstvenem sektorju. Z izvedbo intervjujev in analize strokovne literature bomo poskušali pridobiti podatke na zastavljene cilje. Pri sestavi varnostno operativnega centra se bomo osredotočili na zaposlene, strojno in programsko opremo, kjer nas zanima samo SIEM-sistem. Pri učinkovitosti delovanja pa se osredotočamo na samo zagotavljanje varnosti, uspešnost pri varovanju kritične infrastrukture ter pomoči in podporo drugi organizaciji in varnostno operativnih centrov. Za lažje razumevanje delovanja SIEM-sistema bomo predstavili IBM-QRadar. V zadnjem delu magistrske naloge bomo predstavili rezultate intervjujev. Tako bomo na podlagi pridobljenih rezultatov intervjujev in analize strokovne literature, odgovorili na raziskovalna vprašanja.
Keywords:	kritična infrastruktura, varnostno operativni centri, grožnje, varnost, informacijska varnost, kibernetska varnost, magistrska dela
Place of publishing:	Ljubljana
Place of performance:	Ljubljana
Publisher:	[S. Gjergjek]
Year of publishing:	2020
Year of performance:	2020
Number of pages:	VI, 68 str.
PID:	20.500.12556/DKUM-76976
UDC:	004.056:351.863(043.2)
COBISS.SI-ID:	26913539
NUK URN:	URN:SI:UM:DK:U0HWYV7D
Publication date in DKUM:	02.09.2020
Views:	1530
Downloads:	220
Metadata:
Categories:	FVV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:	English
Title:	Use of the security operations center to protect critical infrastructure
Abstract:	The constant development of technology and cyberspace invites increased usage by companies, organizations and individuals. This also increases the number of threats whose malware is becoming more complex and resistant to detection and removal, while causing more damage. Even the "hackers" themselves are becoming more resourceful in breaking into information systems, they are now harder to detect, as they destroy traces of their activity. Ensuring information and cyber security is crucial, especially in those organizations or companies where any form of attacks could present unimaginable damage or even fatalities. One of these are critical infrastructures, where security comes first. The purpose of the master's thesis is to investigate the security operations center, which is used for the security of critical infrastructure in Slovenia. We will determine the composition and efficiency of the security operations center in three different critical infrastructures, namely in the electro-energetic, telecommunications and health sectors. By conducting interviews and analyzing professional literature, we will try accomplish the goals we have set for the thesis. When compiling the security operations center, we will focus on employees, hardware and software, where we are only interested in the SIEM system. In terms of efficiency, we focus on ensuring security and performance in protecting critical infrastructure, as well as on the assistance and support from other organizations and security operations centers. To make it easier to understand how the SIEM system works, we will present the IBM-QRadar. In the last part of the master's thesis we will present the results of the interviews. Thus, based on the obtained results of interviews and analysis of professional literature, we will answer research questions.
Keywords:	security operation center, critical infrastructure, threats, security

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back