Sigurnost transportnog i aplikacionog sloja

8/15/2019 Sigurnost transportnog i aplikacionog sloja

http://slidepdf.com/reader/full/sigurnost-transportnog-i-aplikacionog-sloja 1/45

I&381 - N@@ ;<@ ;<>

L 08

% IG'$!"%& &$A!%#"$&!"G IA#L IKAC I"!"G %L"JA

I<> F>;

PI#NIK 'A !"#DEN"E



C<=>@ 2010 Q '!IE$I&E& E&$"#"LI&A!, B<>. % =>

>P;. B =>@<; =; << < @>; ';>@@E&$"#"LI&A! >;; >=><, @>;>, @>

<>; ;< @ >P << <;@.,

<=>;, ;;, @><; =@, ;>; ; < <

> ;;.

C<=>@ 2010 BELG$ADE E&$"#"LI&A! '!IE$%I&+. A >@

>>. !< =>@ < @ =@<; >=><, @<> ;

>@> @ <> @>;@@ ; ; <> <> ; ;, @><;,

;, =<@<<=;, ><>;, ;;; <> <@>, @<@ @

=><> >@@; =><; @><=<@; ';>@.



I"381 - ':: >+: *

L* 08

!IG#NO!" "AN!PO"NOG IAPLIKACIONOG !LOJA

%>;<@ @>;=<>@;< =<;< <#< 1: ;<@ ==@<; > >@

#< 2: B;<@ @>;=<>@;< <

#< 3: A@;@U @<>

#< 4: %@>; @>; ;>=

#< 5: %%L K>>< =><@<<

#< 6: B; @ @><; =<N@, #G# %-IE

#< 7: #KI C>@U@ A@<>@

#< 8: P 08

#< 9: D< @ 08



? ? ? ? ? !;: ::

*

'"D

@<< @< < >>@> @<> <.

*= @> :

T J> @@<> >@> <

T A>V J

T =L> =L> >@

T # @<

T BJ> = <> @O, G -$$E

T CV I

+ P > K @J> :

T $@<=

L 08: %>;<@ @>;=<>@;< =<;< <

4



P< 1 % >+:

*: =*;:=

EB BEBED!"%&

@< > JJ > L>

=P> J>.

< > <> / @< J

@= >> *C / >>. @< > JJ

> L> =P> J>:

T J< ><> P>, > > >@ >

@= >>.

T O = =@>=

@J, @<= J @<> >. @

=P >O> =P J >

.

T @PL >> ,

<> >> >VO, P >>

J, >> JJ> . =@<>

=P => @><> J>> >.

T - =P J > < (><. <>>

@) @ < > <@> =@< L>.

%> O - > >@L =P @@ @=

== > -, < @J> = >

<<>= .

T => >L> ( J>>= @>=) > J>L <> J < J>> > -. * > >

> J>> J @ >= < < J>>

@J= V> @=.

EB BEBED!"%!E #$E&!JE

< J>> @> K OK> >>.

#< 1: ;<@ ==@<; > >@

5



> @<= OK> - = @< > @> >

>@. > >@ <L @<O> > =P J=M

@PL > @@ >== > ->

< >L>. A> >@ <L >

>, > @ >J J=M <>

> >= > .

> = <V > > <:

T ,

T @PL

T =P> K J=M @PL .

BJ> @PL J> L>=.

'#"$ED!I #$IKA BEBED!"%!IH#$E&!JI !A EB'

J J>> @> > .

< 1 @> @J J>> @> > .% 1.1 '=<>; =>;<; =>@; ;

L 08: %>;<@ @>;=<>@;< =<;< <

6



EB #$I%&'#I BEBED!"%&I%A"B$AAJA

> >L> < J> >-.

J<L @@ J= <L> L =

@P, < J< @= @=> <> < > >

*C/ @<. < 2 < J<.

T !> >L> J @P> >> J> OK>

@<, < 2

T D O> @O >=> =@<=> J> J>

*C @<, < 2T => @VL> J>> < => >

@> @<, < 2.

% 1.2 $@; < ;<;

;

A##LICA&I"! LA+E$ %EC'$I&+

BJ> > @<>= < > > JO

@< O @< < 7 =<.

A@@<> 

@@<> @@<> -=>. I @@< @@<> >J > .

A@@<> I $> @ @ @@<>- I >>> > ><IJ> ' >>

@@<> V<<. A@@<> I $> =<V << > >>, @>

> > < = @@<> ><> >,

- @>, > @= =@>.

#< 1: ;<@ ==@<; > >@

7



C@< @ >@> > > =< @@<> I, >

V< I@, >> =, > <><.

L 08: %>;<@ @>;=<>@;< =<;< <

8



P< 2 B>+:

::

%%L BEBED!"%& &$A!%#"$&!"G%L"JA

+< # J> > >@>= <.

== < # J> > >@>= <. > B

< K <> J> > > > A.

A JM> # <=, @< <> +# (><.

+>< #) J > h$$!#:// .

PL # @< @< @=> J

@>. %> , >V >O =L> <L. +

= = A >< > <L.

1. @=> J @> @ O A O<

> > B. > B J > > <L A.

2. > B >O > =L> <L, O @=K

> <L > A O< > A. > B

< =L> <L .

K"$ACI %%L %I!H$"!IACIJE

# >>J P <K 7 .

@ >>J =, @ O<

@ *C > J=M @PL , O> @=K

=L> <L . # >>J P <K :

1. PL O< # J @

>@< @ =>J= =

.

2. O< @PL # J, <

@ = >. +> P A > <L @M> CA <.

#< 2: B;<@ @>;=<>@;< <

9



3. PL @ < CA <, > <L J CA

<. @= > , @PL @ <

CA ><J > <.

4. PL >O <L> =L> <L , O

@=K > <L O< <L .

5. !>= @= @PL O K

@ <, O> @=K <L . %>

O< > O> @ ><J @PL

>>J>.

6. O< @PL @ ><J K >

@ < O> <L= .

7. # ><J JO>, # J=>

O> @.

&L% BEBED!"%& &$A!%#"$&!"G%L"JA

*# = J@ > = # J@, J< = > @< J J.

*>@ #I I-*# E*F > <= =>

>> > FC2246. *# = J@ > = #

J@. J< > @< J J. *# J, @<

$ > 3 $> > 1. *# H$AC <= J

>V @> FC2104.

*# @<L> > F (@>= >>)

> > <> =< @<

@.

L 08: %>;<@ @>;=<>@;< =<;< <

10



P< 3 A;::*

;:>*

A'&E!&IFIKACIJA

A>V @ @ < > < >O> > @< .

A>> @ =>> => => , > , < . > @ >

@< =@ > (><> >>), >>

==> <> @. ><

@ = > >. E

>< <), > > >

<-< @. > > , = >

> @ > I=

>> >V> ( > =>I)

@ > > <>, ><.

F >, >> > > =>I >>

= >> >> @. * < V

> V I CV AI-CA @ @ > < I

@= >> > >>. #<<I, >>

@ J> ( = =>).

A'&"$IACIJA AJ > @ @ @@M>= .

AJ> (><. J>) >> @I>

, < >=> I > =@

I > >< > >< > @<. $ =<<I, "

J" V> @<I. F =@<, => U

>=< @< < > =@ I=.

#< 3: A@;@U @<>

11



D> @>, I= >< <

= (>) >= <<

@@ (>) @@ (). ><

>< V<' =' , =@ @=, =@ > >>. E=@<

>= =@ , =@ @= >

> cm!%$e".

L 08: %>;<@ @>;=<>@;< =<;< <

12



P< 4 !:

: *

%IE&$I!A E!K$I#CIJA

BJ > >= <L J O> = J> > (@O<< @=<).

I== >I@> < > ->> >. A I, > >=, , > >= <,

@@< = > >> > @<

I. * = =@< > =

@< > <@. A <> > > @> >

I, I > >I@ > I@ << = I.

A%IE&$I!A E!K$I#CIJA

BJ > @ <L (> >) O @<= J=> <L.

* @<= I >> = >>

< > < @>> = = <<> > > >.

A>I> > I > I@ =. > >

I== >I@>, > < I-- I

@. A @I> = >

> I =. A >, @ I @ , > . A>I = (, >I V<, =>)

>I@ I > @ >

= <=, I > => @ I. A>I =

>I@ I > @ I > >

=> @< I.

* => I > I @> @> ( I @@ @<). A @<=

I== >I@>, , < > I==

#< 4: %@>; @>; ;>=

13



>I@>. = @> @ >I@ >

I@ >> =.

L 08: %>;<@ @>;=<>@;< =<;< <

14



P< 5 !!L K :

" #$"&"K"LIA %%L I KE$BE$"%

< L >==>=, # J=> @ J > $ > L>=.

!> >LOK OK> J>> @< #I-#, < >> > @J> *>@ #I I-

*#.

J >> > > J <>

@ >. C<@> O= - > @J>

K > < @ >. > @J> = =<

<> = @> @ >

@ >. + O>, J > P >

< >> > J < @J>, @><>, J

P > <>=.

5.1 !!L PO"OKOL

%%L #$"&"K"L

!> >LOK OK> J>> @<

#I-#. !> >LOK OK> J>> @<

#I-#, < >> > @J> *>@ #I I-

*#. # J %@. # J>> > == =L>

O> J< @ A. *>L > @

J >> (E*F) >< FC2246, => >

@< J>> > K J #-, >J> *# @< J

1. # < @O >=> =@<=>> @ @<

<> > *C. % = <, @ J =@<=>.

%@O, # (< *#) =P J >> @

@<, @ K J >@>> J @<. A<>>,

# =P M> @VL> @. % @=, %@

#< 5: %%L K>>< =><@<<

15



$ E@< @PL <J @=<> #, K>

= =@<=>> @<. D> => @J

J<L @P J # *#.

%%L A$HI&EK&'$A# *C @< J J> > .

# P <, O @J> > < 1. + O> # <

@= < ><J J=M @<> >@>

<. %=, > @> >, # @= @, O @

= O> @ > *C . % @=> >, # L

@ J *C , O @ = @<. #

*# > >L> = > K. % @=, J>V O> @ J @@ @O $A (><. >>

$< A <).% 5.1.1 A>@@> %%L

=><@<<

DA AO!A %%L K"!CE#&A

D P> # >@ # # >.

D P> # >@ # # >, V>>

@V > <K >L>:

L 08: %>;<@ @>;=<>@;< =<;< <

16



T Knekcija: > @> ( V> =< <)

JM K @ <. #, J

>@> (@--@). > @<J>. >

@J> >= =.

T Se#ija: # <> . >

@=K @< J > (H). V>O @

@ J>> @=, = < J=M

O >. J< J=> >

J>> @= J J.

J=M < @ > (@< O H** > <>

), =P @ O > >. + , =P @

O => J=M >, < > >

@.

J@ >J > J> J . =, = >> @> > J L> @> (> @=,

@=< @O<<). = , J = @< J > (H),

> > L> (><. @>>) L @. %>

@O> JO @< J > (H), > L>

@ >> >.

%%L $# #$"&"K"L

# @< J @> (><. # @<) >

<.

# @< J @> (><. # @<) > < J

# >:

T P&e"lji&#$i : @< J > (H) V>O J>L >

<L J >>><> O> # >

P (><. @I<).

T In$eg"i$e$ !"%ke: @< J > (H) M V>O

J>L > <L J J @

> @ ($AC).

% < 2 @J> @ > # @< J @>.

#< 5: %%L K>>< =><@<<

17



% 5.1.2 %%L =><@<< =;

%%L #$"&"K"L A '#""$E!JE< J @J> @> #-@J> > >@> >.

@= #, @ @J>

=@=> O>, >> @== >>

>.

@ @< . J=

> @J> (1) < > O (><. <) (2) @OP> @. A > >, # = @ J. < J

> = >, < > > > J > >

=P @<>. D P J>L @VL>

@J>. = > @J> @O> $AC. = >

>> (><. >><) @J> <>I @, =

O @=< @O<< >K < O @ > J.

%%L #$"&"K"L A $'K"A!JE

%=@<> # @< J > (><.H> <).

@< =K <> =M> @ >

<= J O>, $AC <= @=

<L= K J JO @ @< # J@.

< J > @ > @> < @<>

@ (@@<> ). < J > >J @

J=> <> , = @= 4 J:

L 08: %>;<@ @>;=<>@;< =<;< <

18



T Fa'a 1. +@ J>> =K> Q <>

@> <L J > J>> =K> K

@J> >=.

T Fa'a 2. > J=> <L Q @L>

J <>= V >V>.

T Fa'a 3. > <> J=> <L Q <>

< @ J J <>

V, @ << @= @<.

T Fa'a 4. O> J Q J =@< @<> >

J. <> O< @ >@@ @ >

L> C@@ >> C@@.

5.2 KEBEO! PO"OKOL

KE$BE$"% #$"&"K"L

J > P > < >>

> J < @J>.

> @@ >J = J

=P> . !> >L> OK> J

@ > J> J > @ > . *

@@ . , @> J> > $*, > @>, >= => =<>-@P>=

J=. + O>, J > P > < >>

> J < @J>, @><>, J

P > <>=.

J< K> O= J @ >,

<> <L > =L>= O>. D J

J>L : 4 & 5. <L> #/*#, < J> J

<>- P>, J J< #/*#, L @=> >=>

JM> @@ . J>> > >= =. %> J 5, >< > E*F

FC1510.

@< <L <>, @<>

. * @> @

=> >L> @> >O J>. J>>

J> @> @ J> <> / <.

#< 5: %%L K>>< =><@<<

19



A'&HE!&ICA&I"! %E$E$ Q A%

J @ > (><. A>> - A) J> <J> > <O

><J> J @.

%> , > =P @ > A J V >.

%> O A @ > >, > =P @@

>= > @<> , K > @ J

<>.

A < >> > <L = =. <L

> VJL < > > > >L>. K =K A

O< @ @<> > > >L>. @L,

> @< > > > J J< J @@ . <> O< @ A <L >L D J

> O @J> J> (><. *-G>> * Q

*G*).

P @ =P <> @ J

<. @J A @ <> >

>. P D >, D , => J> (><.

==@), P> . C<@> O> @= >

DE <L < A . D<, > > =P => . J

J O> @, =P > <> > J O < < .

KE$BE$"% D"E!I

=@<>- P> , < <>, >J@< >J RR =>RR.

=> @ @<> L < >L J @, < <L =,

=>> =>.

$P <> @ J<L= @>= >J=

@O> @< J<L => (><. <=).

* L> > @L>, < > < =>>= @<=,

> > >= =>>= => Q

> = > = =. $M=, >=

>= => =P @@ = = =>=,

> = @=> J @P> < >= J =>, @ <= = >= @> >.

L 08: %>;<@ @>;=<>@;< =<;< <

20



> P< < > = => @>

<J> J . > <> < L> @ J

> @@ > <<> *G, > O< J J J>

<>= *G (*G = =>). <> =P P

<> *G < <J> J P<> => <>

*G. +<J> @< <> J>L => =

> J> >V>. <L < K @

<> J.

KE$BE$"% E$%I"! 5

%LOK OK> J - J 4.

> > J 5. %P> @<O>

J 5 :

T Ad"e#a ned#$a$aka k"%+enja - <= O>, =P>

@<, < , P> , @<M> @

>, >V =M =>=

T Tehni(ki ned#$aci - O>, >>-*D >L>

OK>, <L , <J> >@.

, J 5, O> @ >V=

<= J O>. * =K >= >VO

<=, = DE. J 5 >

=K> OK> <=.

J 5 M @P > @J> @<M> @

>. J 4 > J< > J > <>

@<M> > > OK> > >

<>. =K> < =K <> @@

= @@ <J = <>. % @=,

<> J J J J O=@> (@> )

@@ <> J , > <>

J @@. >L>, J 5 @P = J @ >

=M-=>= J => > J=> <L > J4.

KE$BE$"% "D$OAA!JE #E$F"$A!%I

< @> K = >

@=> <= P>?

K=, @ < =< > @=>

= @> >V>. * = > = J

O> @. D<, <L> K @> J > J J =>. =K @> J @

#< 5: %%L K>>< =><@<<

21



@ >, J=> @ = = <L,

@ > O J=> =>.

<= < @< J @K> @<= < =P < L> = @<=. > >

= @> > =O>, ->>J>

@< O J @. NO, J> -

>< > <>= > J>, J<>

=O>.

>L>, <= =, @< @> < @> K

> O =>, @O> P< @=>. >>. += , = J O => =>>.

A = > < =O>, = =P>=

=>=, > => @ => =P

@>. $M=, > <L.

L 08: %>;<@ @>;=<>@;< =<;< <

22



P< 6 B>+ :

: :, PGP !-MIME

BEBED!I %I%&E ELEK&$"!%KE #"M&E

>O> >O> => @ >>

J> >< < J> <>J<> @O=.

J J=M > <> > >> J K

>J> =. + L J =K ><

=P> K. >O> >O> => @ >>

J> >< < J> <> J<> @O=,

= @@ @> >, =P @L @.

D> -@O > >@@<> < =>. %P<,

< => =L => J>> @<=. BJ><> J=> @ J>>= @<== -@O.

=K O @, = O =

@<>> @=. BJ> <> J=> @, M,

=K <> @@> @, @= @ =

> @ @<.

6.1 PGP (PE""& GOOD PI$AC&)

#G#

R<L> @>RR

RR<L> @>RR (><. I G I Q G)

J>> @= -@O, JJ> >=>; @

@<J>, O . < ===>>,

> >< @> @ <= > >

@=. G JM < @< @ >

=P J <> @O J <O> @<.

#< 6: B; @ @><; =<N@, #G# %-IE

23



A<> @ G-, J J< @<> <L=, P

@ <: @ >, @<, =@, -=<

=@<> =>.

'%L'GA #$"E$E IDE!&I&E&A

G @ >.

G @P < @ >, JO >< :

T @O<< @;

T HA-1 J >> 160-> O @,

T @@ A OK>= @> <L @O<,

><J @< @;

T @=< A >= <L= @O< O

@ ;

T @=< @=<> @ K JL>

@=<> @ @M O>= =.

%@=>: @@< @ A <> @@, >

G J @P OK> D <= J @@. @ =P

> @ / @< / L> >.

E&I$I $%&E KLJ'EA

@ >V J@ <L J O> <L J < M> @.

G L <L: >> =L> <L , >

<L, @> <L J>> > J > (@@-

) =L> <L. <L @J> >=

@= = J O> O> @. <L> >O OK>= > A% 12.17, <J=

J>>= >= >, @ L=

> @ <> <L J >> <L>

.

O > > / @> <L = @ G, @

@ >V J@ <L J O> <L

J < M> @. @, =P < =@<>

> <L = @=, < >V>. +=

G <L >V J>> > >=> P> 64- <L,

K < > >>. * < < = K D

<L @=. D <L M @> J G <> @@.

L 08: %>;<@ @>;=<>@;< =<;< <

24



%LA!JE #"$'KE

O>> @ <> @ G.

P"ce# #lanja !"%ke:

T G K @O< @> <L J @> @> <L

K I >. A I > >>

>, @J= @ @> <L > @>.

T G @ > J > J @ >O> @>

<L.

T G>> @@ - =@>> @.

% 6.1.1 #G# ; =<>

MIF$"A!JE/DEMIF$"A!JE #"$'KE

O>> O> O> @

G.

)if"&anje !"%ke

T G >O <L O @.

T G @J= > <L @= J > <L @> K

>.

T G>><L Q =@>> @.

De*if"&anje !"%ke

#< 6: B; @ @><; =<N@, #G# %-IE

25



T G @J= @> <L @= J @> @> <L,

@=K @> @

>.;

T G @ > J > J @ >O> @>

<L;

T G > @< <L O @.

#G# '#$ALJA!JE KLJ'E

G @P @> >L> J OK> @>,P> @> >= <L=

OK >= @>.

G => > " @ JO > <L

O > @=> ><L". % O> @O J>= =<>= >=<>=

P>=, = < > =P < "CA"

@ > > <L, J= < "@J>

@>" = >=, =< " @>".

G @P @> >L> J OK> @>, P> @>

>= <L= OK >= @>. > <L

<> M J > > @> J <L >=.G J< > @J > >> > <L,

< @ => =@=>, < >> Q JK

OK> <L J P @.

6.2 !/MIME

%/IE

< @K> J> $$E >>

>> = -@O.

/$$E (><. /$<@@ >> $< E>>) @K>

J> $$E >> >> = -@O, @ @P

@O J J<L @ P, > = @O J

><>= >> FC822 > -@O. $$E =K

> >> @ <> < J >@ >

><>= FC822 == -@O. $$E @P >J > @< J<< V>O >= < @, <LK = <

< O> <O >. %P>, $$E V>O

L 08: %>;<@ @>;=<>@;< =<;< <

26



>J = P, >J @J> J @O

=<=<> -@O.

/$$E V>> @ > $$E @ P, @P=K> @@> /< O> @ -@O. /$$E

@O <L> => => > -@O.

E&I$I !"E F'!KCIJE

/$$E @ P @P L > >.

/$$E @ P @P L > >:

T K&e"$i"anje !da$aka (><. E><@ ): O> P < @ O>-P <L

O> J > < O @=.

T P$!i# !da$aka: D<> @@ = JL>>=

J @ > > P K @@>, J=

O @>= <L= @@>. P @< @@ >

O OK>= 64 O>. @> @ @

=P @< = @= / $$E =K>=.

T Ja#an-!$!i# !da$aka (><. C<-> ):

@@> @, => <> @@. $M=, =

<L, = <> @@ > OK>= 64.J< @=< J /$$E =K> =P

P @, = > =P V @@.

T P$!i# i k&e"$i"anje !da$aka: = @@ = O>

> =P >PM>, O> @ =

@@>, @@> @ < > @@> @ =

O>.

&I#IA! #$IE$ '#"&$EBE

*@L> @= @ /$$E @<.

% < 1 @J> @L> @= @ /$$E @<.

#< 6: B; @ @><; =<N@, #G# %-IE

27



% 6.2.1 %/IE

%/IE K$I#&"G$AF%KI ALG"$I&I

J=> <= D HA-1.

J=> <= J @@> /$$E @

> J <> @@ (D) J>> <=, J

1 (HA-1). +J= @ P< @O< OK>= HA-1

<= 160 > J @.

* /$$E O J @=K D @> D <L @O<.

J< <> @@, @< @.

@ =P @> JL> J @, J= O

@@ OK>= D > D <L @O<. A J @

@@ JL>= J @, > @@ <>.BK @ <L = O> O>

160-> <, @> =< => J V @. D

JO< @, @ @< AC J> =

O=@ OK>= O= @J> -64 < /64 =@@>.

<>, =P A <= J O> >=

<L= < HA-1 < $D5 <== J J @ J =>

@@. J=> <= J O> /$$E

@ DE (3DE) <= E<G=<, J> >

DX-H<<=> <= J J=> > <L.

L 08: %>;<@ @>;=<>@;< =<;< <

28



%/IE %E$&IFIKA&I JA!"G KLJ'A

/ $$E V < =M>>= >= .5093.

O J O> , / $$E P @=>, V>

@ > J <> = @P < V> O>

@@>. >> < =K O OK> / $$E

V > <L. / $$E V <

=M>>= >= .5093.

#< 6: B; @ @><; =<N@, #G# %-IE

29



P< 7 PKI C:*:

A;::=

#KI

=K >= J> =>J >> =P O >>.

A (>. ) >< < @< > >> @ > =>I @< > @

I@@ I @ > >

I. * @ @ < V

> >I > >< > >J> > I

> >, > >I, V. A<

=@>> ><, >= U>

> @@ > =>. $><, > >>

> > >.

* @ = @ = > >>

>> = > >I@> =. *><

I@@I << > > >

I >I@> > I@> =. * @

I I= >V> W I

>@ I => <, = > , @ @

@ @@ > >>. * @ I I=

== >> I== I@@I > @ @L> >.

< 1 @J <=> @L> >.

L 08: %>;<@ @>;=<>@;< =<;< <

30



% 7.1 #KI ;>@>@>

CE$&IFICA&E A'&H"$I&+

CA @< > @> @J> TK> @>S.

> I@@I, CV AI-CA, > >I <

V. * < V V >@ @= V. * << (

@) > > = I @ I

@> @ =<

<>@, CA @I I

(>) V > @I @>

V. CA =>I -

=.

C==< CA V << =<> < < 36

CA, =<@< ==< CA << =I

= ). * >= >

> @@<> @< V I

I.

A = ==< CA, = @ < V

@< > . # >> >=> > =I > CA.

#< 7: #KI C>@U@ A@<>@

31



P< 8 $ 08

E&A%#L"I& F$AE"$K

$>< > >@@<> > J $F

"; =>P S--;<R ;@><; <;< << U;

=>@= <@<< >=<<>.

J; < =>< < <P@ >@;@ <

<>@@ %F @ =<@ @ ;>; ;=. %><,

@=<@ @ < @; @< << >; > >@;

N; =< ;< S@=<@R. " ><

;<; =><=@ =>;@>; =@.

% 1 - <;< =<>< <;; ;, ; /<=@/

><>/3 >@<>.% 8.1 <;<

>@ ; < << ;<< > > <@> <;U>;

=>>; < @< =<@;; N@@ ; @

@ >; ;<; >@>@. @=<@ <P@ =>@

@@=://<><>.;@/=><@/@=<@/U/@=<@2/

K @ => , >=@ = @<@, <@<>@ K% =<<

> <@> @ =<>;@ >@; N;.

L 08: %>;<@ @>;=<>@;< =<;< <

32

http://sourceforge.net/projects/metasploitable/files/Metasploitable2/

http://sourceforge.net/projects/metasploitable/files/Metasploitable2/





% 8.3 #>> <;S< =<@R

% 4 - #>> <; S< =<R %F <;;< ; <

=> @ <@=; =< ;< ;< >@;<

>@ <=<. #<@< @> >@ >@ =< < @=<@:

%;, %@>, ; %@. " >@ @=< <<

@>;<@ < @ <>N; >@ ;>. %;

=<< < <<<; =<@=;< <@;. %; =<> <; <>; ;@>

;< @ =<>@; .. %@> =<N >P;

<; ;= P>@, ;>; @<

=<;. %@ =< <=<;;@ < =>@ < @>;

%@> <. $@ < >@ ; < N@<

@>=>@> , !C ;@<;, @.

L 08: %>;<@ @>;=<>@;< =<;< <

34



% 8.4 #>> <;S< =<R

#$"E$A D"%&'#!"%&I

= < L> J P<= = > @>

% 5 - ' << =>> P>@ @ ;< *# %#2 >@; N;

>P;< >< 192.168.1.6. ! =>; =; <;

@=<@ <;U>; ;=% 8.5 #;

% 6 Q K<>@<:

1. S;<//08067;@= =<@R

#< 8: P 08

35



2. =< S;</@>=>@>/>>@=R% 8.6 E=<@

D"DA&!E "#CIJE=>= @> @= @

=P=

% 7 - K<; S< <=@<;R ; =N< ;=.

! < =<@>;< =<@ < ><@ <@ > N@<

=<@P< =<< <; S@ ><@ 192.168.1.6R S@ <@

192.168.1.4R.% 8.7 %< <=@<;

% 8 - L<; > <P< < =><@< <>N;

S<;UR =><>, < ;< < <P< <>;@< =><>S=<;UR.

L 08: %>;<@ @>;=<>@;< =<;< <

36



% 8.8 I<;U

E&E$#$E&E$

+@ =@

% 9 - !<; N@< < =< =>@> ;>< ;= =<<

<; S=<@R. % <P< < <=> =N;

;<; ; <@> @>=>@> <;; ;. K< N@<

>;< @>=>@> ;=>; =< < ; %F. !<

> < <=; ;=>; ; < ; <

@N< ><@. @>=>@> ;< < =<@=;<@

>N <> < , <<;< <

@;>; A;@-> @.% 8.9 E=<@

#< 8: P 08

37



% 10 - #>> <; S=R @>=>@> <;;< ; <

=> @ <@=; <; ;< <=< <;< N@ <;

<>@.% 8.10 H=

"#CIJE E&E$#$E&E$A

K> =K> =@

S@R - => < <>; ;< <>@ @>=>@> ; ;<

N; S@R Q => << ; <>; ; ;< N;

; < @; S;<R - => <;<; ;<> < @,

;, "%, >@@>, S=R - => >P %A

=<@.

L 08: %>;<@ @>;=<>@;< =<;< <

38



% 8.11 #>> <; @>=>@> <;;< ;

% 12 - #>> <>N; <; S>@R => ; ;<

=>< > >;. &> <>@ ;N@< N@< @;< =<>;@<,

=><@;< <P< @ <;. #<< S=R <; <P<

@< @>;@;< @; =><. ! << =>> =>N < ;

=>< =<>>. = 1208.

% 8.12 #>> <>N;<; S>@R

#< 8: P 08

39



K"A!DE E&E$#$E&E$A

K> => =@

% 13 - #<< <; SR < = <P< <

@>;@;< @; =><. K<>N; <; S@ <>/

<R <P< <>;< =<@> ; > ; ;<

N;. K<; SR ; <@> <; =><=@.

">P; =>@=

!<; =N;< ;= ; @, << <, @< <>

<> @ @ <;<@ <>P@ =>@=

=@; =><; >P.

% 8.13 K

% 14 - K<; S;@>@R =<> <> ; ;<

N;, < ; <; S;=R => >P < =>@ < =<>@; <>. J; < ;; << =>@=

;< N; <>N; @ > < N@< =>;< ; .

K<>@ < <<>, <P< =<>@@ @>=>@> =>@= < <

@>;@. B;>; <>; @>@ (;. ;> =<) J; < <;<@

%F- ;>N >N; @<@ @=<@ =<-. "< ;< ; =>. <; ;P;>;, < <P@ ;@>@

<>; =<>; =< ; =<@< >< =>< ><

;< =<@ <@>. ! =>> < ;>@

>> @= =<, @ =<>;@ ; ;< @ <@

@>=>@> <;; ;. D < @< =<@ <>@< <;=<. " <; @@ ;>; =<- <

L 08: %>;<@ @>;=<>@;< =<;< <

40



< <>@@ ; >@ @ ; ; ; <=. !

@>;@;< ;@> , < < <;< *.%-14 K;@>@

E&E$#$E&E$ K"A!D!A LI!IJA

OK> =@ =>> <>

% 15 - G;> < ;< >> @= =<, =>< <

=>@> N; ; < =< =<N@ <;@ ;<;

N@< =<>;@ ;> . K<;< =@; ;< @ @<@. % <

<>@@ @/;>, < => =<@ =<>;@ ; %F-.#<@>;< =<< > <; N; =<>@ < < ;;

=> ;>; =<-. @ <>@< <; =<@ ;<; @<

=<>< =< ; N; P>@.

#< 8: P 08

41



% 8.14 #<

% 16 - !<; N@< < =N;< =< =<>; <P<

< <@<> @>=>@> <;; ;% 8.15 H;>

L 08: %>;<@ @>;=<>@;< =<;< <

42



P< 9 D@ >+: 08

D"AI ADA&AK 8

= =K J

>N; @ =<@>;< :

1. @=<@

2. @=<@

'+:

#>@ ;@>@ @=<@. #>@, >=@ =<>;@

@=<@2.

#<>;@ @=<@2 >@; N;.

'<@ >;: ;, =<>: ;

#<< <; S<;UR =><;@ > >@; N; ;@>

<; >P

#<>;@ @=<@ <;< (<;<)

#<>;@ <; S;= =>R, =>@@ <@<>; =<>@

139

-#<>;@ <; S;< =<@/@//>=>=@R

;<>N@ < =<@

@ =<>;@ >< <;: S =<@/@//

>=>=@R, S@ ><@ =>R S=<@R

P:

T M@ @=<@ < ;< <;<@?

T K< @ <; <>@ ;@> @=<@ ><> <=N@

; ;;?

T '>@< <=N@ S>; = >=@R =<@.

T M@ <<< < =<@?

#< 9: D< @ 08

43



!=<;: D< @ =<@>;< >@ % <> (<)

L>"V (<) <>@ ; >;<@-< =<@

=>@;< @;@.

! @ @> : I&381-D08-=>><I;

%@ - @> : I&381-D08

L 08: %>;<@ @>;=<>@;< =<;< <

44



';

AKLJ'AK

J= = <.

%> > P @<<, > K K <>

J>> J < > >@> @<> <:

T J> @@<> >@> <

T A>V J

T =L> =L> >@

T # @<

T BJ> = <> @O, G -$$E

T CV I

Documents

Sigurnost transportnog i aplikacionog sloja