Priprava in izvedba penetracijskega testiranja v virtualnem okolju

Mrakič, Aljaž

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	Priprava in izvedba penetracijskega testiranja v virtualnem okolju
Authors:	ID Mrakič, Aljaž (Author) ID Brezavšček, Alenka (Mentor) More about this mentor... ID Leskovar, Robert (Comentor)
Files:	MAG_Mrakic_Aljaz_2021.pdf (1,32 MB) MD5: 64B28D96D2D6E19CA8B6C7D672A8C161 PID: 20.500.12556/dkum/a7aeafb5-7dd6-41f9-af7d-db8a600e71c5
Language:	Slovenian
Work type:	Master's thesis/paper
Typology:	2.09 - Master's Thesis
Organization:	FOV - Faculty of Organizational Sciences in Kranj
Abstract:	V zaključnem delu smo se osredotočili na področje varnostnega pregledovanja oz. penetracijskega testiranja kot pomembnega področja t. i. ofenzivne kibernetske varnosti. Predstavili smo teoretične osnove penetracijskega testiranja, od različnih metodologij, metod in tehnik testiranj, najpogosteje uporabljenih orodij in operacijskih sistemov, spletnih strežnikov in aplikacij, do domačih in nekaterih tujih pravnih podlag ter evropskih direktiv s tega področja. V empiričnem delu naloge smo izvedli penetracijski test tudi praktično. Test smo izvajali v izbranem virtualnem okolju, pri čemer smo sledili fazam izbrane metodologije PTES ter uporabili določena orodja, ki smo jih predstavili v teoretičnem delu. Po opravljenem testiranju smo ugotovitve strnili v poročilo in podali predloge za odpravo odkritih ranljivosti z namenom izboljšanja varnosti v izbranem testnem okolju.
Keywords:	kibernetska varnost, hekanje, penetracijsko testiranje, PTES
Place of publishing:	Kranj
Year of publishing:	2021
PID:	20.500.12556/DKUM-79272
COBISS.SI-ID:	72457987
Publication date in DKUM:	08.06.2021
Views:	1578
Downloads:	210
Metadata:
Categories:	FOV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Licences

License:	CC BY-NC 4.0, Creative Commons Attribution-NonCommercial 4.0 International

Link:	http://creativecommons.org/licenses/by-nc/4.0/
Description:	A creative commons license that bans commercial use, but the users don’t have to license their derivative works on the same terms.
Licensing start date:	07.06.2021

Secondary language

Language:	English
Title:	Preparation and examination of a penetration test in a virtual environment
Abstract:	In the thesis, we focused on the penetration testing as an essential area of offensive cybersecurity. In the first part of the thesis, we presented the theoretical background of the penetration testing, ranging from various penetration testing methodologies, testing methods, commonly used testing tools and operating systems, web servers and applications. Furthermore, we described the national and some foreign regulations, including European directives, covering the area of cybersecurity. In the empirical part of the thesis, we examined a real penetration test in a chosen virtual environment. During the testing process, we followed the phases of the PTES methodology. We used some of the tools that we have described within the theoretical part of the thesis. After the testing process, we summarized our findings in a report, where we also made some recommendations on how to fix the discovered vulnerabilities in order to improve the security of the systems under consideration.
Keywords:	cyber security, hacking, penetration testing, PTES

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back