Uloga kibernetičke sigurnosti i ljudskog faktora u zaštiti korporativnih podataka

master's thesis

• Title (english): The role of cybersecurity and human factor in corporate data protection
• Author: Tin Marević
• Mentor: Mario Spremić (mentor); MBZ: 233591
• Committee member: Mario Spremić (predsjednik povjerenstva)
• Committee member: Ivan Strugar (član povjerenstva)
• Committee member: Božidar Jaković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Economics and Business; (Department of Informatics); Zagreb
• Defense date and country: 2020-09-08, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Economics; Business Informatics

Abstract

Tema ovog diplomskog rada nastoji povezati pojmove kibernetičke sigurnosti i ljudskog faktora, te način djelovanja na zaštitu korporativnih podataka. Upravo korporativni podaci mogu sadržavati povjerljive informacije o korisnicima i njihovim pohranjenim podacima, transakcijama ili poslovnim tajnama, te takvi podaci predstavljaju važan resurs koje poduzeće želi zaštiti kako bi spriječilo nedozvoljeni pristup trećim stranama, a time i otuđenje i iskorištavanje tih informacija u nedozvoljene svrhe kako bi nanijelo financijsku štetu ili narušavanje ugleda poduzeća. Kao cilj ovog istraživanja želi se ljudski faktor prikazati kao jednu od najslabijih točki u informacijskim sustavima poduzeća, te način na koji napadači mogu raznim oblicima prijetnji iskoristiti tu ranjivost ljudskog faktora. Tako se induktivnom metodologijom prikupljanja podataka nastoje definirati prisutne prijetnje i ranjivosti, te u samoj studiji slučaja prikazati način primjene jedne od tih prijetnji kako bi se iznio zaključak o utjecaju ljudskog faktora na kibernetičku sigurnost poduzeća. Za studiju slučaja odabran je spear-phishing napad na Yahoo! korporaciju, te je u rezultatima studije slučaja vidljivo kakav utjecaj može imati takav napad koji može dovesti do isplate milijunskog iznosa odštete u tužbi i smanjenja otkupne cijene korporacije, ali i gubitka ugleda i povjerenja velikog broja korisnika u usluge koje Yahoo! korporcija pruža.

Abstract (english)

The topic of this master thesis seeks to connect the concepts of cyber security and the human factor with the way of acting on the protection of corporate data. It is corporate data that can contain confidential information about users and their stored data, transactions or trade secrets and such data is an important resource that a company wants to protect in order to prevent unauthorized access of third parties and thus the theft and use of such information for unauthorized purposes that would cause financial damage or damage to the company's reputation. The aim of the research in this master thesis is to present the human factor as one of the weakest links in the company's information systems and the way in which attackers can exploit this vulnerability of the human factor with various forms of threats. Thus, the inductive methodology of data collection seeks to define the present threats and vulnerabilities and in the case study to show the application of one of these threats to conclude the impact of the human factor on cyber security within an enterprise. The chosen case study shows a conducted spear-phishing attack on the Yahoo! corporation and the results of the case study show the impact of such an attack, which can lead to the payment of millions in the lawsuit and reduce the purchase price of the corporation, but also the loss of reputation and trust of many users in the services provided by the Yahoo! corporation.

• Keywords: kibernetička sigurnost; ljudski faktor; korporativni podaci; spear-phishing napad
• Keywords (english): cybersecurity; human factor; corporate data; spear-phishing attack
• Language: croatian
• URN:NBN: urn:nbn:hr:148:551927
• Study programme: Title: Business Economics; Study programme type: university; Study level: integrated undergraduate and graduate; Academic / professional title: magistar/magistra ekonomije (magistar/magistra ekonomije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Access restricted to authenticated users
• Created on: 2020-09-08 11:35:39