| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

Show document Help

Title:Kibernetska (ne)varnost privilegiranih dostopov : diplomsko delo visokošolskega študijskega programa Informacijska varnost
Authors:ID Ladan, Edvard (Author)
ID Bernik, Igor (Mentor) More about this mentor... New window
Files:.pdf VS_Ladan_Edvard_2025.pdf (2,34 MB)
MD5: BC4983C0A2498EC809A4D01C7E96414E
 
Language:Slovenian
Work type:Bachelor thesis/paper
Typology:2.11 - Undergraduate Thesis
Organization:FVV - Faculty of Criminal Justice and Security
Abstract:V ospredju diplomskega dela je raziskovanje področja privilegiranih dostopov v informacijskih sistemih, saj prav takšni dostopi predstavljajo eno izmed največjih varnostnih tveganj v sodobnem digitalnem okolju. Poudarja pomembnost zavedanja in razumevanja o tem, da ti dostopi kljub pogosti predpostavki o njihovi samoumevni varnosti niso nujno ustrezno zaščiteni, prav tako jih posamezniki ne uporabljajo na varen način. Rezultati analize so pokazali, da lahko neustrezno ravnanje z dostopi predstavlja resno grožnjo in kibernetsko nevarnost za informacijske sisteme, na ravnanje pa pomembno vplivajo napačne predstave o zanesljivosti privilegiranih računov in njihovih uporabnikih. V ospredju naloge so tudi teoretično ozadje, pomen digitalne identitete in upravljanje identitet ter dostopov, kar je osnova za dodeljevanje in upravljanje privilegiranih pravic. Pozornost je usmerjena tudi v koncept najmanjšega privilegija, večfaktorsko overjanje in pristop z ničelnim zaupanjem, ki so danes nujni sestavni del sodobnih varnostnih strategij. Delo nadalje podrobneje obravnava tehnologijo upravljanja privilegiranih dostopov, njene zmožnosti, izzive in pomen integracije z drugimi sistemi, kot je t. i. aktivni imenik. Raziskava se osredotoča tudi na aktualne grožnje, povezane s privilegiranimi dostopi, ter vpliv sodobnih tehnologij, med katerimi je umetna inteligenca, na področje njihovega upravljanja in zaščite. V okviru razprave so potekali intervjuji s strokovnjaki, prav tako je bila ključna analiza nevarne prakse v navezavi na uporabo privilegiranih dostopov. V ospredju so tudi nekatere priporočene rešitve za njihovo zmanjševanje oziroma odpravo. Diplomsko delo poudarja potrebo po boljši ozaveščenosti uporabnikov z večjimi dostopnimi pravicami in po doslednem upoštevanju najboljših praks za varnostno upravljanje. Na osnovi uporabe strokovnih virov in lastnih ugotovitev delo opozarja, da so ozaveščenost, pravilna uporaba in ustrezna orodja ključni dejavniki, ki vplivajo na učinkovito zaščito privilegiranih dostopov in posledično na celotno informacijsko varnost.
Keywords:kibernetska varnost, dostop, večfaktorsko overjanje, diplomske naloge
Publication status:Published
Publication version:Version of Record
Place of publishing:Ljubljana
Place of performance:Ljubljana
Publisher:E. Ladan
Year of publishing:2025
Year of performance:2025
Number of pages:XI f., 127 str.
PID:20.500.12556/DKUM-95790 New window
UDC:004.056(043.2)
COBISS.SI-ID:262615811 New window
Publication date in DKUM:22.12.2025
Views:144
Downloads:22
Metadata:XML DC-XML DC-RDF
Categories:FVV
:
Copy citation
  
Average score:(0 votes)
Your score:Voting is allowed only for logged in users.
Share:Bookmark and Share



Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Licences

License:CC BY-NC-ND 4.0, Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International
Link:http://creativecommons.org/licenses/by-nc-nd/4.0/
Description:The most restrictive Creative Commons license. This only allows people to download and share the work for no commercial gain and for no other purposes.
Licensing start date:22.10.2025

Secondary language

Language:English
Title:Cyber (in)security of privileged access
Abstract:This thesis explores the field of privileged access in information systems, as such accounts represent one of the greatest security risks in today’s digital environment. It emphasizes the importance of recognizing that privileged accounts—despite the common assumption of their inherent security—are not always adequately protected or used safely. Improper handling of these accounts can pose severe cyber risks, which makes their management a critical component of information security. The research provides the theoretical background of digital identity and Identity and Access Management (IAM) as the foundation for granting and controlling privileged rights. Special attention is given to the principle of least privilege, multi-factor authentication, and zero-trust approaches, all of which have become essential in modern security strategies. The study also examines Privileged Access Management (PAM) technology, focusing on its capabilities, integration with systems such as Active Directory, and challenges organizations face in implementation. In addition, current threats targeting privileged access are analyzed, including the role of emerging technologies like artificial intelligence in both strengthening and potentially undermining access security. Expert interviews conducted for this thesis revealed risky practices related to privileged access, such as overuse of domain administrator accounts and poor password hygiene, while also pointing toward best practices such as tiered access models, session recording, and real-time monitoring. These insights underline the need for stronger user awareness, adherence to security policies, and the adoption of advanced PAM solutions. Overall, the findings show that awareness, proper use, and the integration of appropriate tools are the key factors in safeguarding privileged accounts. Strengthening these areas not only protects critical assets but also ensures the resilience of entire information systems against evolving cyber threats.
Keywords:privileged access, cybersecurity, identity and access management, multi-factor authentication


Comments

Leave comment

You must log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back
Logos of partners University of Maribor University of Ljubljana University of Primorska University of Nova Gorica