Istraživanje obilježja phishing napada

master's thesis

• Title (english): A study on features of phishing attacks
• Author: Dominik Starček
• Mentor: Mario Spremić (mentor)
• Committee member: Ivan Strugar (predsjednik povjerenstva)
• Granter: University of Zagreb; Faculty of Economics and Business; (Department of Informatics); Zagreb
• Defense date and country: 2023-09-15, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Economics; Business Informatics

Abstract

Informacijski sustavi su svojom pojavom u 20.-om stoljeću značajno unaprijedili proces poslovanja te moderno poslovanje doveli na potpuno novu razinu. Pojavom informacijskih sustava pojavile su se i prijetnje njihovoj sigurnosti. Kao jedna od najozloglašenijih i najopasnijih prijetnji sigurnosti informacijskih sustava izdvojili su se phishing napadi. Pojam phishing napad označava prijetnju sigurnosti informacijskih sustava i sastoji se od elektroničke pošte koja sadrži poveznicu preko koje se, u slučaju pritiska na istu, na sustav instalira zloćudni kod koji omogućava pojedincu ili organizaciji pristup vrijednim informacijama. Sigurnost informacijskih sustava postala je jedan od imperativa poslovanja u modernom okruženju, te se osim metoda digitalne zaštite podataka počinju razvijati poslovne kulture u kojima je zaštita informacijskih sustava prioritet. Teorijski dio rada pruža uvid u koncepte informacijskih sustava, sigurnosti informacijskih sustava i phishing napada. Temeljni cilj rada je objasniti što su to phishing napadi, kako ih prepoznati te kako se zaštititi od njih. U empirijskom dijelu rada bit će prikazana tri odvojena slučaja ovakvih vrsta napada te će se metodom analize slučaja utvrditi njihove sličnosti i posljedice.

Abstract (english)

The introduction of information systems in the 20th century has significantly improved the process of business and raised modern business on an entirely different level. However, their introduction also sparked the appearance of threats to their security. One of the most infamous and dangerous of these types of threats is phishing. The term phishing refers to a type of e-mail attack that poses a threat to information system security. The e-mail typically contains a link that, when clicked on, immediately installs malware on the owner's computer, which allows the individual or organization behind this attack access to vital information. Information system security has become crucial for business processes in the modern environment. Digital security alone is no longer sufficient, and modern companies develop workplace cultures that center around information system security. The theoretical section of this paper provides an insight into the concepts of information systems, information system security, and phishing attacks. The main objective is to clarify what these attacks represent, how to detect them, and how to protect against them. The empirical section of this paper will present three isolated instances of phishing attacks and their analysis using the case study method, which will determine the similarities and consequences of these types of attacks.

• Keywords: informacijski sustav; sigurnost informacijskih sustava; phishing napadi
• Keywords (english): information system; information system security; phishing attacks
• Language: croatian
• URN:NBN: urn:nbn:hr:148:445469
• Study programme: Title: Business Economics; Study programme type: university; Study level: integrated undergraduate and graduate; Academic / professional title: magistar/magistra ekonomije (magistar/magistra ekonomije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2023-09-15 10:38:53