20.500.12556/RUL-171949 Demonstracija napadov na Active Directory v strežniškem okolju Windows Demonstration of Attacks on Active Directory in a Windows Server Environment V diplomski nalogi smo obravnavali Windows Active Directory ter možnosti zaščite pred napadi, ki so ogrožali uporabnike in celovitost podjetja, ki je uporabljalo to storitev. Podrobno smo analizirali več vrst napadov, med njimi: enumeracijski napad, Kerberos napad, napad s pršenjem gesel... Vsi analizirani napadi so bili usmerjeni v izkoriščanje ranljivosti znotraj Active Directory okolja, predvsem z namenom pridobivanja poverilnic, povečanja privilegijev in nepooblaščenega dostopa do omrežnih virov. V okviru praktičnega dela smo v varnem testnem okolju simulirali več različnih scenarijev napadov ter analizirali njihove učinke in značilnosti. Na podlagi rezultatov smo pripravili priporočila za izboljšanje varnosti Active Directory okolja, ki vključujejo ustrezne tehnične in organizacijske ukrepe, kot so pravilna konfiguracija sistema, krepitev politike gesel, nadzor dostopa ter uvedba sistemov za zaznavanje in odzivanje na napade. Namen diplomske naloge je bil prispevati k boljšemu razumevanju tveganj, povezanih z Active Directory, ter prikazati konkretne možnosti za povečanje kibernetske varnosti v sodobnih informacijskih okoljih. In this thesis, we examined Windows Active Directory and the possibilities for protecting it against attacks that threatened users and the integrity of companies relying on this service. We thoroughly analyzed several types of attacks, including enumeration attacks, Kerberos attacks, password spraying attacks... All analyzed attacks targeted vulnerabilities within the Active Directory environment, primarily aiming to obtain credentials, escalate privileges, and gain unauthorized access to network resources. As part of the practical work, we simulated various attack scenarios in a secure test environment and analyzed their impact and characteristics. Based on the findings, we prepared recommendations for improving the security of the Active Directory environment, which include appropriate technical and organizational measures such as proper system configuration, strengthening password policies, access control, and the implementation of intrusion detection and response systems. The purpose of this thesis was to contribute to a better understanding of the risks associated with Active Directory and to present concrete options for enhancing cybersecurity in modern IT environments. Active Directory informacijska varnost Windows strežnik napadi na infrastrukturo zaščita sistemov kibernetski napadi simulacija napadov penetracijsko testiranje Active Directory information security Windows server infrastructure attacks system protection cyber attacks attack simulation penetration testing true false false Slovenski jezik Angleški jezik Diplomsko delo/naloga 2025-09-04 11:45:07 2025-09-04 11:45:13 2025-09-28 03:54:12 0000-00-00 00:00:00 2025 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 37949 248501507 Tajnsek_Aljaz_-_Demonstracija_napadov_na_Active_Directory_v_strezniskem_okolju_Windows.pdf Tajnsek_Aljaz_-_Demonstracija_napadov_na_Active_Directory_v_strezniskem_okolju_Windows.pdf 1 170A85FE6DDA73F5CD8F70DFBCBCD7B8 8df897b142304941dc64d2d16a5ff273397ea6a70526578e6698d538e125e527 b470f6e3-8973-11f0-9328-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=215541 Fakulteta za računalništvo in informatiko 0 0 0