Utrjevanje strežnikov Windows v različnih poslovnih okoljih

BARTOL, TOMAŽ (author), Ciglarič, Mojca (mentor)

V digitalnem okolju, kjer je informacijska tehnologija ključna, se ustanove soočajo z nenehnimi grožnjami kibernetske varnosti. Magistrska naloga obravnava izboljšanje varnostnih praks v poslovnem okolju z utrjevanjem strežnikov z operacijskim sistemom Windows. Raziskuje izzive in ranljivosti, s katerimi se ustanove srečujejo, ter ponuja rešitve za identifikacijo in odpravo potencialnih varnostnih lukenj. Poseben poudarek je na varnostnem utrjevanju strežnikov in računalnikov z operacijskim sistemom Windows, vključno z najnovejšimi različicami, kot so Windows Server 2019, Windows Server 2022, Windows 10 in Windows 11. Cilj naloge je izboljšati celovito varnostno postavitev na ravni strežnikov. V okviru naloge smo analizirali obstoječe varnostne nastavitve in priporočila za utrjevanje strežnikov z OS Windows ter implementirali testno okolje za preverjanje učinkovitosti teh nastavitev. Pri tem smo uporabili orodja, kot je Microsoft Security Compliance Toolkit, za primerjavo varnostnih konfiguracij. Ugotovili smo, da pravilna konfiguracija in uporaba varnostnih nastavitev bistveno zmanjšata tveganje za kibernetske napade, kar prispeva k večji varnosti poslovnih okolij.

• Language: Slovenian
• Keywords: Informacijska tehnologija, strežnik, utrjevanje strežnikov, utrjevanje operacijskega sistema, operacijski sistem Windows, varnost v informatiki, kibernetski napad, kibernetski kriminal, kibernetska varnost.
• Work type: Master's thesis/paper
• Typology: 2.09 - Master's Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2024
• PID: 20.500.12556/RUL-160106
• COBISS.SI-ID: 207611395
• Publication date in RUL: 21.08.2024

BARTOL, TOMAŽ, 2024, Utrjevanje strežnikov Windows v različnih poslovnih okoljih [online]. Master’s thesis. [Accessed 26 April 2025]. Retrieved from: https://repozitorij.uni-lj.si/IzpisGradiva.php?lang=eng&id=160106

Secondary language

• Language: English
• Title: Windows server hardening in different business environments

Abstract

In a digital environment where information technology is crucial, institutions face constant cybersecurity threats. This master's thesis addresses the improvement of security practices in a business environment by server hardening with Windows operating system. It explores the challenges and vulnerabilities that institutions encounter and offers solutions for identifying and addressing potential security gaps. A special focus is placed on security hardening for servers and computers running Windows operating systems, including the latest versions such as Windows Server 2019, Windows Server 2022, Windows 10, and Windows 11. The aim of the thesis is to improve the overall security posture at the server level. In the course of this thesis, we analyzed existing security settings and recommendations for hardening servers with Windows OS and implemented a test environment to verify the effectiveness of these settings. We used tools such as the Microsoft Security Compliance Toolkit to compare security configurations. We found that proper configuration and use of security settings significantly reduce the risk of cyber attacks, contributing to greater security in business environments.

• Keywords: Information technology, server, server hardening, operating system hardening, Windows operating system, IT security, cyberattack, cybercrime.