HAL will be down for maintenance from Friday, June 10 at 4pm through Monday, June 13 at 9am. More information
Skip to Main content Skip to Navigation
Master Thesis

Amélioration de la cyber sécurité d'un système d'information par augmentation du niveau de confiance

Abstract : This thesis aims to define the best strategy to secure the Information System I’m currently working on. In order to succeed, we’ll consider this IS architecture in regard to the potential cyber threats weighing on this system and to the legislative framework governing cyberspace at both international and national levels. The most likely threat comes from malicious groups backed by States. These actors benefit from significant resources which allow them to have complex, efficient and hard to detect techniques, tactics and procedures. Moreover, the cyberspace structure allows these organizations to implement anonymization techniques aiming to make these attacks attributions extremely complex. This precise immunity encourages cyber hackers to launch uninhibited actions. The study of the cyberspace international regulation reveals some consequent differences within the way States consider these issues. And the resulting legal weaknesses constitute an additionnal advantage for these hackers. In this context, France has been implementing a proactiv cyber defense strategy for the past fifteen years. This policy is organized into two main directions. The first one consists on a restrictive legislation regarding IS security, especially for the structures French state considers as of vital importance. The second one is the creation of state agencies dedicated to cyber defense. The IS we aim to protect through this thesis is accessible from the internet and, because of its historical evolution, is based on different heterogeneous security bricks which are not linked to a centralized security policy. In order to resist to the anonymization capacities of cyber hackers, the most accurate strategy will be to increase the level of trust in the information system. To do so, three improvement axes have been identified: trust in connections, authentification and events logs. The implemented technologies to reach these goals are the Virtual Private Networks, the Public Key Infrastructures and finally the additional systems to protect events logs. The association of these technologies will make the intrusion into the IS more complex, by limiting the cyber hackers’ freedom of action. Moreover, the event logging will allow an accurate analysis of the led actions in case of a security event. Finally, centralized management of the security issues will simplify the administrators’ tasks.
Document type :
Master Thesis
Complete list of metadata

https://dumas.ccsd.cnrs.fr/dumas-03385870
Contributor : Idpe Idpe Connect in order to contact the contributor
Submitted on : Tuesday, October 19, 2021 - 4:14:09 PM
Last modification on : Sunday, May 1, 2022 - 3:19:10 AM

File

2020.IDPE.Sanchez.Cyril.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : dumas-03385870, version 1

Collections

Citation

Cyril Sanchez. Amélioration de la cyber sécurité d'un système d'information par augmentation du niveau de confiance. Cryptographie et sécurité [cs.CR]. 2020. ⟨dumas-03385870⟩

Share

Metrics

Record views

0

Files downloads

0