20.500.12556/RUL-173793 Praktična implementacija kibernetskih vab za nadzor in analizo kibernetskih napadov Practical Implementation of Honeypots for Monitoring and Analysis of Cyber Attacks V diplomskem delu je predstavljena praktična implementacija kibernetske vabe za spremljanje in analizo kibernetskih napadov. Na osnovi pasivnega zajema omrežnega prometa so bila identificirana najpogosteje skenirana vrata ter analizirani viri prometa. Na podlagi teh podatkov je bila vzpostavljena srednje interaktivna kibernetska vaba Cowrie, ki je bila prilagojena tako, da je delovala čim bolj realistično. Integracija s sistemom Splunk je omogočila centralizirano zbiranje dnevniških zapisov in vizualizacijo podatkov o napadalcih. Analiza interakcij in naložene zlonamerne kode je pokazala, da napadalci še vedno pogosto uporabljajo metode, kot so avtomatizirani napadi na zastarele ali slabo konfigurirane storitve. Vaba je kljub temu nudila dragocen vpogled v njihovo delovanje ter potrdila svojo uporabnost kot raziskovalno in varnostno orodje. This thesis presents the practical implementation of a honeypot for monitoring and analyzing cyberattacks. Based on passive traffic capture, the most frequently scanned ports were identified and the main sources of traffic were analyzed. Using this information, a medium-interaction honeypot based on the Cowrie project was deployed and customized to provide a realistic environment. The honeypot was integrated with the Splunk system, enabling centralized log collection and data visualization of attacker interactions. The analysis of interactions and uploaded malware revealed that attackers still commonly rely on methods, such as automated exploitation of outdated or misconfigured services. Nevertheless, the honeypot provided valuable insights into their behavior and confirmed its usefulness as both a research and security tool. kibernetska vaba omrežna varnost analiza zlonamerna koda Cowrie honeypot cybersecurity analysis malware Cowrie true false false Slovenski jezik Angleški jezik Diplomsko delo/naloga 2025-09-23 12:55:19 2025-09-23 12:55:23 2025-11-25 13:26:23 0000-00-00 00:00:00 2025 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 62981 258638595 Dolenec_Benjamin_-_Prakticna_implementacija_kibernetskih_vab_za_nadzor_in_analizo_kibernetskih_n.pdf Dolenec_Benjamin_-_Prakticna_implementacija_kibernetskih_vab_za_nadzor_in_analizo_kibernetskih_n.pdf 1 C5CE971560430B69385F522E31CE77C6 0fb80ae69094ff8070f6afe0d12cf0170da099645bd39a7d65eb6cf7c058908a 9ee97b41-986b-11f0-9328-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=218452 Fakulteta za elektrotehniko 0 0 0