INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU

Biočić, Ivo

prikaz prve stranice dokumenta INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU

Access restricted to students and staff of home institution

master's thesis

INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU

Split: University of Split, University Department of Professional Studies, 2020. urn:nbn:hr:228:768536

Biočić, Ivo

University of Split
University Department of Professional Studies

Request a copy
of the document

Cite this document

APA 6th Edition

Biočić, I. (2020). INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU (Master's thesis). Retrieved from https://urn.nsk.hr/urn:nbn:hr:228:768536

MLA 8th Edition

Biočić, Ivo. "INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU." Master's thesis, University of Split, University Department of Professional Studies, 2020. https://urn.nsk.hr/urn:nbn:hr:228:768536

Chicago 17th Edition

Harvard

Biočić, I. (2020). 'INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU', Master's thesis, University of Split, University Department of Professional Studies, accessed 08 February 2023, https://urn.nsk.hr/urn:nbn:hr:228:768536

Vancouver

Biočić I. INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU [Master's thesis]. Split: University of Split, University Department of Professional Studies; 2020 [cited 2023 February 08] Available at: https://urn.nsk.hr/urn:nbn:hr:228:768536

IEEE

I. Biočić, "INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU", Master's thesis, University of Split, University Department of Professional Studies, Split, 2020. Available at: https://urn.nsk.hr/urn:nbn:hr:228:768536

Cite this item: https://urn.nsk.hr/urn:nbn:hr:228:768536

Please login to the repository to save this object to your list.

Metadata

Title	INTEGRACIJA BRO(ZEEK) ALATA ZA OTKRIVANJE NAPADA I ELK STACKA ZA ANALIZU I VIZUALIZACIJU
Title (english)	INTEGRATION OF BRO(ZEEK) TOOL FOR ATTACK DETECTION AND ELK STACK FOR ANALYSIS AND VISUALIZATION
Author	Ivo Biočić
Mentor	Tatjana Listeš (mentor)
Committee member	Haidi Božiković (član povjerenstva)
Committee member	Igor Nazor (član povjerenstva)
Granter	University of Split University Department of Professional Studies Split
Defense date and country	2020-09-16, Croatia
Scientific / art field, discipline and subdiscipline	TECHNICAL SCIENCES Computing
Abstract	Potreba za visokom razinom mrežne sigurnosti danas je vrlo velika, te neprestano raste, kako za zaštitu pojedinih računala tako i za zaštitu cjelokupne mreže. Sustav koji automatizirano prati mrežne i sistemske događaje u svrhu otkrivanja kršenja sigurnosne politike naziva se sustav za otkrivanje napada. Ovaj rad se bavi takvim sustavima. Temeljem toga objašnjene su mogućnosti i metodologije sustava za otkrivanje napada. U praktičnom dijelu rada prikazane su mogućnosti Bro (Zeek) alata otvorenog koda koji služi za otkrivanje napada na sustav i nadgledanje mrežnog prometa u stvarnom vremenu. Kako takvi alati generiraju jako puno log zapisa (engl. log files), u praktičnom dijelu rada predložena je integracija Bro (Zeek) alata s ELK Stack-om koji omogućava centralizirano skupljanje svih Bro (Zeek) logova, njihovu analizu i te vizualizaciju. Rezultat svega toga je sustav koji omogućava korisniku dosta iscrpnu i detaljnu analizu, i grafičku vizualizaciju mrežnog prometa.
Abstract (english)	The need for a high level network security today is very high, and is constantly growing, both to protect individual computers and to protect the entire network. A system that automatically monitors network and system events for the purpose of detecting security policy violations is called an intrusion detection system. This paper deals with such systems. Based on this, the possibilities and methodologies of the attack detection system are explained. The practical part of the paper presents the possibilities of the Bro (Zeek) open source tool that is used to detect intrusions into the system and monitor network traffic in real time. As such tools generate a lot of log files, the practical part of the paper proposes the integration of Bro (Zeek) tools with ELK Stack, which enables centralized collection of all Bro (Zeek) logs, their analysis and visualization. The result of all this is a system that allows the user a very comprehensive and detailed analysis and graphical visualization of network traffic.
Keywords
Keywords (english)
Language	croatian
URN:NBN	urn:nbn:hr:228:768536
Study programme	Title: Information Technology – specialist graduate - professional Study programme type: professional Study level: specialist graduate Academic / professional title: STRUČNI/A SPECIJALIST/SPECIJALISTICA INŽENJER/INŽENJERKA INFORMACIJSKIH TEHNOLOGIJA (STRUČNI/A SPECIJALIST/SPECIJALISTICA INŽENJER/INŽENJERKA INFORMACIJSKIH TEHNOLOGIJA)
Type of resource	Text
File origin	Born digital
Access conditions	Access restricted to students and staff of home institution
Terms of use
Repository	Repository of University Department of Professional Studies
Created on	2020-11-26 10:59:23