PROBLEMATIKA ZERO DAY NAPADA I MOGUĆA ZAŠTITA

master's thesis

• Title (english): ISSUES OF ZERO DAY ATTACKS AND THE POSSIBILITY OF PROTECTION
• Author: Marina Toplak
• Mentor: Mario Spremić (mentor)
• Committee member: Ivan Strugar (predsjednik povjerenstva)
• Committee member: Božidar Jaković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Economics and Business; (Department of Informatics); Zagreb
• Defense date and country: 2021-09-10, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Economics; Business Informatics

Abstract

Tehnologija postaje sve naprednija te se razvijaju nove tehnologije koje unapređuju i poboljšavaju poslovanje i svakodnevicu. Nažalost, nove tehnologije sa sobom nose i rizik kibernetičkih napada. Jedan od kompleksnijih i još nedovoljno shvaćenih napada je Zero day. Ovaj rad je osmišljen kako bi pružio uvid u kompleksnost samog napada. Što napad čini Zero day napadom, kako nastaje, tko ga provodi, zašto i koje su njegove moguće posljedice. Pošto je to vrlo složen napad koji se mijenja iz dana u dan i postaje sve sofisticiraniji i napredniji, opisani su i primjeri koji to pokazuju. Od nešto starijih napada kao što je Stuxnet i Duqu do novijih napada kao što je Sunburst i napad na Microsoft Exchange server. Zaštita od kibernetičkih napada je izazovna i ovisi o njihovoj složenosti i sofisticiranosti. Što se tiče Zero day napada, najučinkovitiji način za obranu je otkrivanje ranjivosti prije drugih i njihovo rješavanje. No, ljudi i istražuju načine koji će pomoći u zaštiti od Zero day napada. Upravo ta kompleksnost i problematika je prikazana u ovom radu.

Abstract (english)

Technology is becoming more advanced and new technologies are being developed to improve and enhance business and everyday life. Unfortunately, new technologies carry the risk of cyber attacks. One of the most complex and still misunderstood attacks is Zero day. This paper is meant to provide insight into the complexity of the attack itself. What makes an attack a Zero day attack, how it starts, who is responsible for it, what are the consequences of this attack. Since this is a very complex attack that changes and becomes more sophisticated and advanced from day to day, there are given examples for better understanding. From slightly older attacks like Stuxnet and Duqu to newer attacks like Sunburst and an attack on a Microsoft Exchange server. Protection against cyber attacks is challenging and it depends on their complexity and sophistication. As for Zero day attacks, the most effective way of defending is to detect vulnerabilities before anybody and patching them. But people are still exploring the ways of detection and protection against Zero day attacks. This complexity and problematic are presented in this paper.

• Keywords: kibernetički napadi; kibernetička sigurnost; Zero day napad; Zero day ranjivosti; Zero day istraživanja
• Keywords (english): cyberattacks; cybersecurity; Zero day attack; Zero day vulnerabilities; Zero day research
• Language: croatian
• URN:NBN: urn:nbn:hr:148:873644
• Study programme: Title: Business Economics; Study programme type: university; Study level: integrated undergraduate and graduate; Academic / professional title: magistar/magistra ekonomije (magistar/magistra ekonomije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2021-09-12 17:05:38