20.500.12556/RUL-99931 Zagotavljanje varnosti pred napadi v kriptiranem prometu Protection against attacks in encrypted traffic Glavni cilj diplomske naloge je obravnava težav pri varnostnem preverjanju šifriranega prometa spletnih povezav. Internetna in spletna varnost sta ogroženi na mnogo načinov. Večina povezav skozi javno omrežje je danes kriptiranih na transportni plasti. V prvem delu zato podajam potrebne osnove pomembnejših kriptografskih protokolov in njihovo vlogo na internetu. Podajam tudi pomen certifikatov in potek samega rokovanja. Delež šifriranega prometa se iz dneva v dan povečuje, s tem pa se povečujejo tudi varnostna tveganja na spletu. Kriptiran promet je potrebno varnostno nadzorovati in preverjati. Vidljivost v šifriranem prometu je ključna za varovanje podatkov. V primeru, da šifriranega prometa ne pregledujemo, obstaja velika verjetnost, da ne bomo zaznali določenih napadov, naša organizacija pa bo tako občutljiva na kršitve. Četrto poglavje naloge obravnava splošni pregled varnosti na nivoju šifiriranega prometa. Podane so najpogostejše ranljivosti in vrste napadov na transportni plasti. Seveda je skoraj nemogoče predstaviti vse izmed njih, saj jih je že samo v kriptografski knjižnici OpenSSL znanih preko 180 [1]. V nadaljevanju naloge obravnavam opis problemov na nivoju nekriptiranih povezav. V glavnem delu naloge navajam tudi analizo varnostnih rešitev, ki jih za kriptirani promet omogoča programska oprema proizvajalca F5 Networks. SSL zagotavlja varnost, vendar s seboj prinaša izzive na nivoju zagotovitve učinkovitega varovanja podatkov, zato je prav to fokus naslednjega poglavja. Glede na dosedanje trende bo kmalu obstajal le še kriptiran promet. V nadaljevanju podajam rešitev s pomočjo aplikacije vodilnega ponudnika rešitev v tehnologiji SSL, proizvajalca F5 Networks. Konkretna rešitev je izvedena s pomočjo vpogleda v šifriran promet in orkestracije le-tega. The main goal of the thesis is the investigation of problems in security checks of encrypted web traffic. Both web and internet security are endangered in many ways. Most of the public network connections today are encrypted on the transport layer. In the first part, I therefore provide the necessary basics of important cryptographic protocols and their role on the internet. I also specify the importance of certificates and the course of the handshake itself. The percentage of encrypted traffic is increasing day by day thereby increasing the online security risks. Encrypted traffic must be securely supervised and checked. Visibility in encrypted traffic is crucial for data protection In the event that encrypted traffic is not reviewed, there is a high probability that we will not detect certain attacks, and our organization will be vulnerable to violations. Chapter four of the assignment examines a general overview of security at the encrypted traffic level. The most common vulnerabilities and types of attacks on the transport layer are specified. Of course it is almost impossible to present all of them, since there are over 180 of them in the OpenSSL cryptographic library alone [1]. In the continuation of the assignment, I discuss and describe problems at the level of non-encrypted connections. In the main part of the assignment I also provide an analysis of the security solutions provided by the software from the manufacturer F5 Networks for encrypted traffic. SSL provides security, but brings with it challenges at the level of ensuring effective data protection, which is why that is the focus of the next chapter. Given the current trends, soon there will only be encrypted traffic. In the continuation, I provide a solution with the help of an application from the leading provider of SSL technology solutions, manufactured by F5 Networks. The practical solution is carried out by means of insight into encrypted traffic and orchestration of said traffic. SSL TLS https varnost orkestracija ranljivost napadi vidljivost šifriranega prometa F5 Networks SSL TLS https security orchestration vulnerabilities attacks encrypted traffic visibility F5 Networks true false false Slovenski jezik Angleški jezik Diplomsko delo/naloga 2018-02-23 11:50:08 2018-02-23 11:50:16 2022-08-24 17:11:02 0000-00-00 00:00:00 2018 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 1970-01-01 40161 Hrovat_Spela_-_Zagotavljanje_varnosti_pred_napadi_v_kriptiranem_prometu.pdf Hrovat_Spela_-_Zagotavljanje_varnosti_pred_napadi_v_kriptiranem_prometu.pdf 1 55BEB7F5E3EA902DF143854AF2F3AD88 97fb40a988c7c516e24f8c9a8c77d2bfbce53c57c4f6181f9d6e63bd44d54ade a80cbb3b-a1b4-11eb-a523-00155dcfd717 20.500.12556/rul/15dc1046-7d9f-41f4-bd8f-4fbbcb69e9d4 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=109566 Fakulteta za elektrotehniko 0 0 0