Varnostni vidiki spletnih storitev

ŽUGELJ, BOŠTJAN (author), Kos, Andrej (mentor)

V zaključnem diplomskem delu so predstavljene številne nevarnosti na spletu in osnovni napadi na zasebne uporabnike. Ti napadi se razlikujejo, od odlično odigranih lažnih vlog, kot je administrator spletne strani, do skrbno načrtovanega programskega napada. Teoretični del diplomske naloge je namenjen predstavitvi nevarnosti, ki na nas pretijo in nas spremljajo ob našem brezskrbnem spletnem klikanju. Postavitev spletne strani, katera deluje brez uporabe piškotkov, je namenjena seznanitvi uporabnika z uhajanjem številnih informacij, brez njegove vednosti. To so lahko podatki, o uporabnikovi lokaciji, brskanju po spletu ali seznam »všečkanih« vsebin in statusov na socialnih omrežjih. Glavni namen postavitve spletne strani je prikaz, da se kljub uporabnikovem nestrinjanju z uporabo piškotkov in s tem zbiranju informacij o njemu, lahko v ozadju, brez njegove vednosti, dogaja prav slednje.

• Language: Slovenian
• Keywords: varnost, informacije, spletna aplikacija, vdori
• Work type: Bachelor thesis/paper
• Organization: FE - Faculty of Electrical Engineering
• Year: 2016
• PID: 20.500.12556/RUL-81575
• Publication date in RUL: 14.04.2016

Secondary language

• Language: English
• Title: Security aspects of web services

Abstract

In the final diploma thesis are presented many web dangers and basic attacks on private users. The latter vary from perfectly played false roles, such as an administrator of a website, to well-planned software attacks. The theoretical part of this diploma work is designed for an easier introduction to dangers that threaten us and represent a big part of our carefree browsing. Intention of the practical part of the diploma, which is the formation of a basic website, is to acquaint the user with information that is leaking without his knowing. This information may include user's location, web browsing or a list of 'liked' contents and statuses on social networks. The main purpose of the website is the demonstration of collection of user's information despite his declining of cookies.

• Keywords: security, information, web application, intrusion