Varovanje omrežij pred sodobnimi grožnjami s požarnimi zidovi naslednje generacije

DELGIUSTO, VALTER (author), Ciglarič, Mojca (mentor)

Ker klasični požarni zidovi že dolgo niso kos modernim grožnjam, ki prežijo na vsakodnevne uporabnike interneta, smo v diplomskem delu želeli preučiti njihove naslednike – požarne zidove naslednje generacije. V prvem delu diplomskega dela opisujemo moderne grožnje in napade. Podrobno smo opisali DoS in APT napada, ki sta med njimi najbolj pogosta in katera lahko povzročita največ škode v sistemu, ki ga napadeta. Nato smo podali teoretične osnove delovanja požarnih zidov ter opisali funkcionalnosti požarnih zidov naslednje generacije. V nadaljevanju smo izvedli različne teste na treh požarnih zidovih naslednje generacije, analizirali rezultate testov ter jih predstavili. Cilj diplomskega dela je bil ugotoviti, ali lahko požarni zidovi naslednje generacije ustrezno nadomestijo klasične požarne zidove in tako pripomorejo k ustrezni zaščiti uporabnikov interneta.

• Language: Slovenian
• Keywords: Požarni zid naslednje generacije, varnost, DoS napad, APT napad.
• Work type: Undergraduate thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2016
• PID: 20.500.12556/RUL-91204
• Publication date in RUL: 24.03.2017

Secondary language

• Language: English
• Title: Securing Networks from Modern Threats using Next Generation Firewalls

Abstract

Classic firewalls have long been unable to cope with modern threats that ordinary Internet users are exposed to. This thesis discusses their successors - the next-generation firewalls. The first part of the thesis describes modern threats and attacks. We described in detail the DoS and APT attacks, which are among the most frequent and which may cause most damage to the system under attack. Then we explained the theoretical basics of firewalls and described the functionalities of next generation firewalls. In the following chapter we performed various tests on three models of next-generation firewalls analyzing and presenting the test results. The aim of the thesis was to determine whether the next-generation firewalls are appropriate to replace conventional firewalls and so to contribute to the adequate protection of Internet users.

• Keywords: Next- generation firewall, security, DoS attack, APT attack.