Korištenje otvorenih rješenja za detekciju upada i nadzor mreže u vojnoj domeni

master's thesis

• Title (english): Using Open Source Tools for Intrudion Detection and Network Monitoring in Military Domain
• Author: Mateo Martinović
• Mentor: Marin Vuković (mentor)
• Mentor: Josip Kelava (komentor)
• Committee member: Igor Štambuk (predsjednik povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Committee member: Josip Kelava (član povjerenstva)
• Granter: University of Zagreb; (Croatian Defence Academy "Dr. Franjo Tuđman"); Zagreb
• Defense date and country: 2020-07-16, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Interdisciplinary Technical Sciences
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Security and Defense Science

Abstract

Sastavni dio kibernetičkog prostora u vojnoj domeni su računalne mreže koje se u svrhu njihove
zaštite moraju nadzirati. Svrha ovog rada je da se predoče dostupna otvorena rješenja za nadzor,
te time i zaštitu vojnih računalnih mreža. Predodžbom raspoloživih rješenja odabire se
jedinstveno s kojim se provodi laboratorijsko testiranje. Stoga se obrađuju karakteristike
računalnih mreža, princip nadzora te alati prema kategorijama prikupljanja i analize podataka te
detekcije upada. Analizom i usporedbom alata odabire se otvoreno rješenje mrežnog sigurnosnog
nadziranja Security Onion. Odabrano rješenje se implementira u laboratorijskim uvjetima te se
vrši ispitivanje na specifičnim servisima. Iz svega toga se opisuje mjesto i način implementacije
rješenja u vojnim računalnim Informacijskim sustavima.

Abstract (english)

An integral part of cyberspace in the military domain are computer networks that must be
monitored in order to protect them. Purpose of this paper is to present the available open source
solutions for monitoring, and thus the protection, of military computer networks. From
presentation of the available solutions, the unique solution is selected with which laboratory
testing is performed. Therefore, the paper will touch upon the characteristics of computer
networks, the principle of monitoring and tools according to the categories of data collection and
analysis, so as intrusion detection. By analyzing and comparing the tools, an open source
solution of network security monitoring, Security Onion, is selected. The selected solution is
implemented in laboratory surrounding and tested on specific services. From all of this, the place
and the way of implementation are being described in terms of military computer information
systems.

• Keywords: Vojne računalne mreže; nadzor računalne mreže; vojni Informacijski sustavi; detekcija upada; analiziranje mrežnog prometa; rješenje Security Onion; kibernetičko ratovanje; mrežno sigurnosno nadziranje
• Keywords (english): Military computer networks; computer networks surveillance; military Information system; intrusion detection; network traffic analysis; Security Onion solution; cyber warfare; network security monitoring
• Language: croatian
• URN:NBN: urn:nbn:hr:249:212640
• Study programme: Title: Military Engineering; Study programme type: university; Study level: graduate; Academic / professional title: MAGISTAR/MAGISTRA INŽENJER/INŽENJERKA VOJNOG INŽENJERSTVA (MAGISTAR/MAGISTRA INŽENJER/INŽENJERKA VOJNOG INŽENJERSTVA)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2021-02-01 11:34:47