TECHNIQUES FOR DETECTING AND PREVENTING INTRUSIONS INTO WEB APPLICATIONS

Pojav interaktivnih in kompleksnejših spletnih aplikacij je s seboj prinesel tudi porast spletnih vdorov, ki so skozi čas postali vse bolj prefinjeni in naprednejši. V tem diplomskem delu so predstavljene nekatere najpogosteje uporabljene tehnike vdiranja. Z namenom odkriti varnostne luknje, ki so dopustile izvedbo napada, ter poiskati najustreznejše varnostne rešitve, ki bi aplikacijo zaščitile pred vnovično izvedbo vdora, so bile tehnike vdiranja preizkušene na naši ranljivi spletni aplikaciji. Po implementaciji varnostnih rešitev je bila testirana njihova učinkovitost in pojasnjen njihov način delovanja.The emergence of complex and interactive web applications, resulted in rise of web intrusions, which became more sophisticated and advanced over time. This diploma thesis presents some of the most high-profile hacking techniques. In order to detect security holes, which allowed carrying out the attack, and find the most appropriate security solutions that would protect the application from re-execution of the intrusion, hacking techniques have been tested on our vulnerable web application. After the implementation of security solutions, their effectiveness has been tested and explained