20.500.12556/RUL-175557 Visoko-interaktivna Redis limanica z ELK analitiko High-interactive Redis honeypot with ELK analytics Redis je zaradi svoje široke uporabe in pogosto nepravilne konfiguracije postal priljubljena tarča kibernetskih napadov, kar ustvarja potrebo po boljšem razumevanju in analizi varnostnih groženj. V tem delu predstavljamo implementacijo visoko-interaktivne Redis limanice (angl. honeypot), ki omogoča transparentno prestrezanje in beleženje vseh povezav ter ukazov na Redis strežnik. Sistem temelji na posredniškem strežniku v programskem jeziku Go, ki prestrežene povezave posreduje interni Redis instanci, pri tem pa vse interakcijev realnem času beleži in analizira preko integracije z naborom orodij ELK (Elasticsearch, Logstash, Kibana). Celotna rešitev je implementirana kot vsebniška aplikacija z uporabo tehnologije Docker. Eksperimentalna evalvacija je pokazala, da sistem učinkovito zaznava različne vrste napadov, od preprostih poskusov skeniranja do sofisticiranih večstopenjskih napadov. Razviti sistem predstavlja pomemben prispevek k boljšemu razumevanju varnostnih izzivov Redis strežnikov in demonstrira uporabnost limanic pri raziskovanju kibernetskih groženj. Redis has become a popular target for cyber attacks due to its widespread use and frequent misconfigurations, creating a need for better understanding and analysis of security threats. This work presents the implementation of a high-interactive Redis honeypot that enables transparent interception and logging of all connections and commands to a Redis server. The system is based on a proxy server implementedin Go programming language, which forwards intercepted connections to an internal Redis instance while logging and analyzing all interactions in real-time through integration with the ELK stack (Elasticsearch, Logstash, Kibana). The entire solution is implemented as a containerized application using Docker technology. Experimental evaluation demonstrated that the system effectively detects various types of attacks, from simple scanning attempts to sophisticated multi-stage attacks. The developed system represents an important contribution to better understanding Redis server security challenges and demonstrates the utility of honeypots in cybersecurity threat research. ELK analitika kibernetska varnost limanica Redis varnostne grožnje ELK analytics cybersecurity honeypot Redis security threats true false true Slovenski jezik Angleški jezik Članek v reviji 2025-11-04 09:37:53 2025-11-04 09:37:54 2025-12-12 03:47:51 0000-00-00 00:00:00 2025 0 0 12 str. št. 3 Letn. 33 2025 0000-00-00 Zaloznikova Objavljeno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004 1318-1882 10.31449/upinf.251 250593027 RAZ_Gazvoda_de_Reggi_Marin_2025.pdf RAZ_Gazvoda_de_Reggi_Marin_2025.pdf 1 012E51F640008B09BB5EAE0FC3DDB285 eb4e2f3c0d58c09f78024805259d5d805ac77d44539759847c56eec8ae4f2b1f e3754f46-d1d1-11f0-9328-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=223081 https://uporabna-informatika.si/ui/article/view/251 1 3eb183ad-b959-11f0-9328-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=221309 Fakulteta za računalništvo in informatiko 0 0 0