prikaz prve stranice dokumenta Sigurnost Java aplikacija u WEB okruženju
Access restricted to authenticated users
master's thesis
Sigurnost Java aplikacija u WEB okruženju
2021. urn:nbn:hr:179:460332
Dolić, Stipe
University of Split
Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture
Department of Electronics and Computing

Cite this document

Dolić, S. (2021). Sigurnost Java aplikacija u WEB okruženju (Master's thesis). Split: University of Split, Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture. Retrieved from https://urn.nsk.hr/urn:nbn:hr:179:460332

Dolić, Stipe. "Sigurnost Java aplikacija u WEB okruženju." Master's thesis, University of Split, Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture, 2021. https://urn.nsk.hr/urn:nbn:hr:179:460332

Dolić, Stipe. "Sigurnost Java aplikacija u WEB okruženju." Master's thesis, University of Split, Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture, 2021. https://urn.nsk.hr/urn:nbn:hr:179:460332

Dolić, S. (2021). 'Sigurnost Java aplikacija u WEB okruženju', Master's thesis, University of Split, Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture, accessed 19 November 2024, https://urn.nsk.hr/urn:nbn:hr:179:460332

Dolić S. Sigurnost Java aplikacija u WEB okruženju [Master's thesis]. Split: University of Split, Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture; 2021 [cited 2024 November 19] Available at: https://urn.nsk.hr/urn:nbn:hr:179:460332

S. Dolić, "Sigurnost Java aplikacija u WEB okruženju", Master's thesis, University of Split, Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture, Split, 2021. Available at: https://urn.nsk.hr/urn:nbn:hr:179:460332

Please login to the repository to save this object to your list.
Metadata
TitleSigurnost Java aplikacija u WEB okruženju
Title (english)Security of Java applications in WEB environment
AuthorStipe Dolić
MentorJulije Ožegović (mentor)
GranterUniversity of Split
Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture
(Department of Electronics and Computing)
Split
Defense date and country2021-09-01, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Kroz ovaj diplomski rad čitatelj se upoznaje s Java tehnologijom, jednom od najpoznatijih i najkorištenijih tehnologija za izradu konvencionalnih aplikacija. Također se koristi i za izradu WEB aplikacija koje se mogu pokretati putem WEB preglednika gdje nailazinamo na problem sigurnosti tokom samog izvođenja aplikacija na taj način. U drugom poglavlju se daje teorijski opis konvencionalne Jave te neke od njezinih najvaznijih karakteristika. Objektno orjentirani koncepti su nezaobilazan aspekt konvencionalne Jave. Treće poglavlje bavi se tehnologijama Java EE za izradu WEB aplikacija. Java Servlet tehnologija, JavaServer Pages i Java Message Service API su jedne od najbitnijih tehnologija koje su opisane u spomenutom poglavlju. Četvrto poglavlje uvodi problem osiguravanja Java EE WEB aplikacija. Prikazano je osnovno osiguravanje jednostavne aplikacije te sigurnosni mehanizmi koji se koriste. Opisani su i ključni pojmovi kao što su realm, grupa i korisnici. U petom poglavlju su navedeni glavni napadi na sigurnost Java WEB aplikacija te kako se zaštiti od njih. Cross-site request forgery je detaljnije je opisan jer je opasan i jako učestal. Šesto poglavlje obuhvaća eksperimentalno pokretanje jednostavne Java WEB aplikacije putem browsera. Korišten je Spring Boot jer sadrži puno alata koje omogućuju pokretanje same aplikacije. Jedan od alata je ugrađeni Apache Tomcat poslužitelj koji djeluje kao WEB poslužitelj i osluškuje zahtjeve na localhost portu 8080. Izvučeni su zaključci iz predstavljenih opasnosti od napada i načina osiguravanja aplikacije koji su navedeni u radu isto kao i iz samog eksperimentalnog dijela rada.
Abstract (english)
Trough this graduate thesis, the reader is introduced to Java technology, one of the most famous and used technologies for creating conventional applications. It is also used to create WEB applications that can be run trough a WEB browser where we encounter a security problem while running applications in this way. The second chapter gives theoretical description of conventional Java and some of its most important characteristics. Object-oriented concepts are an indispensable aspect of conventional Java. The third chapter deals with Java EE technologies for creating WEB applications. Java Servlet Technology, JavaServer Pages and Java Message Service API are one of the most important technologies described in this chapter. Chapter 4 introduces the problem of securing Java EE WEB applications. The basic security of a simple application and the security mechanisms used are shown. Key terms such as realm, group and users are also described. Chapter 5 lists the main attacks on the security and protection of Java WEB applications. Cross-site request forgery is described in more detail because it is dangerous and very common. The experimental launch of a simple Java WEB application trough a browser is covered in chapter 6. Spring Boot was used because it contains a lot of tools that allow the application itself to run. One of the tools is a built-in Apache Tomcat server that acts as a WEB server and listens to request on localhost port 8080. Conclusions were drawn from the presented dangers of attacks and ways of securing the applications listed in the paper as well as from the experimental part of the work itself.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:179:460332
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsAccess restricted to authenticated users
Terms of useLicence In copyright icon
Created on2021-12-01 11:45:27