Digitalna forenzika u mrežama vojne namjene zasnovanim na internetskom protokolu

undergraduate thesis

• Title (english): Digital forensics in Internet Protocol-based Military Networks
• Author: Marija Zelenak
• Mentor: Marin Vuković (mentor)
• Mentor: Darko Možnik (komentor)
• Committee member: Ivica Smojver (predsjednik povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Committee member: Darko Možnik (član povjerenstva)
• Granter: University of Zagreb; (Croatian Defence Academy "Dr. Franjo Tuđman"); Zagreb
• Defense date and country: 2022-07-15, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Interdisciplinary Technical Sciences

Abstract

U ovom završnom radu detaljnije je objašnjen koncept mrežne digitalne forenzike i
njegova važnost u vojnim sustavima temeljenim na internetskom protokolu. Mrežna forenzika
analizira sam izvanredni događaj, a to može biti napad od strane neprijatelja ili pojava kvara i
neke druge smetnje na mreži. Kao i u civilnim organizacijama, oružane snage i ministarstva
obrane koriste tehnologiju kako bi pojednostavili pohranu i razmjenu podataka. Vojska je meta
brojnih upada i pokušaja ometanja pohrane i prijenosa podataka, kao i njihove krađe. Napad na
vojni ili državni sustav ne ugrožava samo gubitak informacija kao prijetnju poslovanju i
financijama, već i prijetnju nacionalnoj sigurnosti. Stavlja se imperativ nadzor mreže u realnom
vremenu, kako bi se u što kraćem vremenu otkrile moguće prijetnje, te tako reagirale na iste. U
ovom radu razmotrena je primjena alata Wireshark i njegova implementacija u vojne sustave.
Prikazane su metode analize paketa poslanih mrežom te su neke primijenjene na konkretnom
primjeru SQL ubrizgavanja i XSS reflektiranog napada u DWVA lokalnoj mreži. Zaključno je
kako je alat Wireshark od koristi ako bilježi promet na mreži čitavo vrijeme, kako bi se u slučaju
izvanrednog događaja mogla analizirati snimka prometa i utvrditi priroda kvara ili eventualnog
napada.

Abstract (english)

This final paper explains in more detail the concept of network digital forensics and its
importance in military protocols based on the Internet Protocol. Network forensics analyzes the
extraordinary event itself, and it can be an attack by the enemy or the occurrence of a
malfunction and some other interference on the network. As in civilian organizations, the armed
forces and ministries of defense use technology to simplify the storage and exchange of data.
The military has been the target of numerous intrusions and attempts to disrupt the storage and
transmission of data, as well as their theft. An attack on a military or state system threatens not
only the loss of information as a threat to business and finances, but also a threat to national
security. The imperative is to monitor the network in real time, in order to detect possible threats
in the shortest possible time, and thus react to them. This paper discusses the application of the
Wireshark tool and its implementation in military systems. Methods of analysis of packets sent
by the network are presented, and some are applied to a specific example of SQL injection and
XSS reflected attack in DWVA local network. In conclusion, the Wireshark tool is useful if it
records online traffic all the time, so that in the event of an emergency, a snapshot of the traffic
can be analyzed and the nature of the malfunction or possible attack determined.

• Keywords: digitalna forenzika; mrežna forenzika; informacijska sigurnost; sigurnost kibernetičkog prostora; TCP/IP; IP protokoli; Wireshark; SQL ubrizgavanje; XSS reflektirani napad
• Keywords (english): digital forensics; network forensics; information security; military cyber security; TCP/IP; IP protocols; Wireshark; SQL injection; XSS reflected
• Language: croatian
• URN:NBN: urn:nbn:hr:249:892708
• Study programme: Title: Military Engineering; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica inženjer/inženjerka vojnog inženjerstva (sveučilišni/a prvostupnik/ prvostupnica inženjer/inženjerka vojnog inženjerstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-26 11:48:02