Vulnerability testing of computer systems and feature analysis during forensic processing

Slabosti raĉunalnih sustava velika su prijetnja sigurnosti vlada, organizacija i krajnjeg korisnika. Da bi se mogli zaštiti moramo razumjeti puteve kojima se kibernetiĉki kriminal ostvaruje. U ovom radu smo naveli i objasnili metode upada na raĉunalo te metodologiju kojom forenziĉari pristupaju mjestu dogaĊaja kako bi osigurali autentiĉnost dokaza. Osim toga ukazali smo na mogućnost korištenja etiĉkog hakiranja unutar procesa pronalaska digitalnih dokaza. Da bi osigurali pristup raĉunalu moramo znati njegove ranjivosti tako da te ranjivosti moţemo iskoristiti. Takvom iskorištavanju raĉunala prethodi testiranje ranjivosti raĉunalnih sustava. Na praktiĉnom primjeru smo testirali sigurnosne ranjivosti unutar operacijskog sustava Windows 7 i operacijskog sustava Linux. Rezultate testiranja smo upotrijebili za iskorištavanje ranjivosti i rekonstrukciju napada na ranjive raĉunalne sustave. Na kraju smo istaknuli sigurnosne smjernice i preporuke koje su mogle poboljšati sigurnost raĉunalnih sustava i mreţnu sigurnostWeaknesses of computer systems are a major threat to the security of governments, organizations, and the end user. In order to protect ourselves, we need to understand the ways in which cybercrime is perpetrated. In this paper, we have listed and explained the methods of intrusion into computer systems and the methodology by which forensic investigators approach the scene to ensure the authenticity of the digital evidence. In addition, we pointed to the possibility of using ethical hacking within the process of finding digital evidence. To ensure access to a computer, we need to know its vulnerabilities so that we can exploit those vulnerabilities. Such exploitation of computers is preceded by vulnerability testing of computer systems. For a practical example, we tested security vulnerabilities within Windows 7 and Linux. We used the test results to exploit vulnerabilities and reconstruct attacks on vulnerable computer systems. Finally, we highlighted security guidelines and recommendations that could improve computer system security and network security