Estabelecimento de diretrizes de forense computacional para ataques direcionados
Carregando...
Arquivos
Data
2015
Tipo de documento
Monografia
Título da Revista
ISSN da Revista
Título de Volume
Área do conhecimento
Ciências Exatas e da Terra
Modalidade de acesso
Acesso aberto
Editora
Autores
Augusto, Rodrigo de Abreu
Orientador
Lento, Luís Otávio Botelho
Coorientador
Resumo
A forense computacional é a ciência que compreende a aquisição, prevenção, recuperação e análise de evidências computacionais, que foram processados eletronicamente e armazenados em mídias computacionais. Este trabalho visa elaborar um conjunto de diretrizes para analise de ataques direcionados em sistemas computacionais, baseado no modelo forense. Para adquirir o conhecimento necessário para elaboração do projeto, foram estudados os assuntos sobre forense computacional, suas implicações legais, como adquirir, preservar, analisar e apresentar os dados de uma investigação. Sobre segurança da informação, seus conceitos, suas características, mecanismos, suas politicas de segurança e formas de proteção. Sobre ataques direcionados, seus métodos, suas características e seu funcionamento. Com isso, baseado no modelo forense foram estabelecidas diretrizes para analise de ataques direcionados, visando melhorar os aspectos que envolvem a segurança de informação. Cada etapa foi descrita detalhadamente e apresentada através de fluxogramas para melhor entendimento. Para a validação do modelo foi realizado um estudo de caso, no qual foram obtidos os resultados esperados com a utilização das diretrizes propostas neste projeto
The computational forensic is the science that understands the acquisition, prevention, recovery and analysis of computational evidences, that were processed electronically and stored in computational media. This work aims at to elaborate a set of lines of direction for analysis of attacks directed in computational systems based in the forensic model. To acquire the knowledge necessary for elaboration of this project, were studied the subjects on computational forensic, as its legal implications, to acquire, to preserve, to analyse and to present the data of the investigation. On security of information, its concepts, its characteristics, mechanisms, its security politics and forms of protection. On directed attacks, its methods, its characteristics and it's functioning. With this, based in the forensic model, guidelines of direction for analysis of directed attacks were established, aiming at to improve the aspects that involve the information security. Each step was described in detail and presented through flowcharts for a better understanding. For the validation of the model, a case study was accomplished, where the expected results were obtained with the use of the guidelines proposed in this project
The computational forensic is the science that understands the acquisition, prevention, recovery and analysis of computational evidences, that were processed electronically and stored in computational media. This work aims at to elaborate a set of lines of direction for analysis of attacks directed in computational systems based in the forensic model. To acquire the knowledge necessary for elaboration of this project, were studied the subjects on computational forensic, as its legal implications, to acquire, to preserve, to analyse and to present the data of the investigation. On security of information, its concepts, its characteristics, mechanisms, its security politics and forms of protection. On directed attacks, its methods, its characteristics and it's functioning. With this, based in the forensic model, guidelines of direction for analysis of directed attacks were established, aiming at to improve the aspects that involve the information security. Each step was described in detail and presented through flowcharts for a better understanding. For the validation of the model, a case study was accomplished, where the expected results were obtained with the use of the guidelines proposed in this project
Palavras-chave
Sistemas de informação gerencial, Sistemas de recuperação da informação - Segurança, Segurança de sistemas, Crime por computador