| fullrecord |
[{"key": "dc.contributor.advisor", "value": "Lehto, Martti", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.advisor", "value": "H\u00e4m\u00e4l\u00e4inen, Timo", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "Soivi, Lauri", "language": "", "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.contributor.author", "value": "Kiuru, Niko", "language": "", "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2022-06-08T06:37:58Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2022-06-08T06:37:58Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2022", "language": "", "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/81558", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Internetin k\u00e4ytt\u00f6 on lis\u00e4\u00e4ntynyt viime vuosien aikana merkitt\u00e4v\u00e4sti, mik\u00e4 on johtanut siihen, ett\u00e4 verkossa jaetaan eneneviss\u00e4 m\u00e4\u00e4rin arkaluonteista tietoa. Verkkosivun ja verkkoselaimen v\u00e4lill\u00e4 siirrett\u00e4v\u00e4n arkaluonteisen tiedon turvalliseen v\u00e4litt\u00e4miseen on kehitetty TLS-salaus, mutta t\u00e4m\u00e4n k\u00e4ytt\u00f6\u00f6nottaminen ei yksin\u00e4\u00e4n takaa riitt\u00e4v\u00e4\u00e4 turvallisuutta. T\u00e4m\u00e4 johtuu siit\u00e4, ett\u00e4 TLS-salaus koostuu useista eri asetuksista, jotka verkkosivustojen yll\u00e4pit\u00e4jien pit\u00e4\u00e4 huomioida, jotta salaus voidaan toteuttaa riitt\u00e4v\u00e4n vahvasti. Jos salausta ei toteuteta riitt\u00e4v\u00e4n hyvin, voi pahantahtoisille tahoille vuotaa arkaluonteista tietoa, kuten k\u00e4ytt\u00e4j\u00e4tunnuksia tai salasanoja. T\u00e4m\u00e4n tutkielman p\u00e4\u00e4tavoitteena oli perehty\u00e4 Helsingin p\u00f6rssiyhti\u00f6iden verkkosivujen TLS-salauksen tasoon ja tarkastella, onko kyseiset verkkosivut salattu riitt\u00e4v\u00e4n vahvalla TLS-salauksella. Tutkimuksen alatavoitteena oli kehitt\u00e4\u00e4 ty\u00f6kalu, jolla voidaan ker\u00e4t\u00e4 tietoa verkkosivujen TLS-salauksesta. Tutkimuksen teoriaosuudessa esitell\u00e4\u00e4n oleellisia k\u00e4sitteit\u00e4 liittyen verkkosivustojen toimintaan sek\u00e4 keskityt\u00e4\u00e4n TLS-salaukseen ja siihen liittyviin osioihin. Teoriaosuuden lopussa k\u00e4sitell\u00e4\u00e4n vahvan TLS-salauksen t\u00e4rkeytt\u00e4 sek\u00e4 luodaan TLS-salauksen suositeltu v\u00e4himm\u00e4istaso, jota vasten ker\u00e4ttyjen verkkosivujen TLS-salausta verrattiin. Kehitetyn ty\u00f6kalun avulla ker\u00e4ttiin 4431 kappaletta Helsingin p\u00f6rssiyhti\u00f6iden julkisia verkkosivuja, joiden TLS-salauksen tasoa arvioitiin. Ty\u00f6kalu julkaistiin julkiseen k\u00e4ytt\u00f6\u00f6n, jotta kuka tahansa pystyy hy\u00f6dynt\u00e4m\u00e4\u00e4n tai kehitt\u00e4m\u00e4\u00e4n ty\u00f6kalua omiin tarpeisiinsa. Tutkimuksessa vain 3,5 prosenttia ker\u00e4tyist\u00e4 verkkosivuista t\u00e4ytti kaikki asetetut TLS-salauksen v\u00e4himm\u00e4istason suositukset. Tulos viittaa siihen, ett\u00e4 tutkittujen verkkosivujen TLS-salauksien vahvuudessa olisi parannettavaa. Tutkimuksessa avattiin tarkemmin kaikki kymmenen asetettua suosituskategoriaa, jotta n\u00e4htiin yleisimm\u00e4t syyt sille, miksi verkkosivut eiv\u00e4t l\u00e4p\u00e4isseet asetettuja suosituksia. N\u00e4m\u00e4 yleisimm\u00e4t puutteet l\u00f6ytyiv\u00e4t salaussarjoista, OCSP staplingista ja HSTS:st\u00e4. Tutkimuksessa esitettiin mahdollisia syit\u00e4, miksi verkkosivujen TLS-salauksen eri osa-alueet eiv\u00e4t t\u00e4ytt\u00e4neet asetettuja suosituksia, mutta todellisten syiden selvitt\u00e4minen j\u00e4tettiin jatkotutkimuksiin, koska niiden selvitt\u00e4minen ei kuulunut t\u00e4m\u00e4n tutkimuksen tavoitteisiin.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.abstract", "value": "The use of the Internet has increased significantly in recent years, which has led to the sharing of more sensitive data online. TLS encryption has been developed for the secure transmission of sensitive information transferred between a website and a web browser, but the implementation of this alone does not guarantee sufficient security. This is because TLS encryption consists of several different settings that website administrators need to consider for the encryption to be strong enough. If the encryption is implemented poorly, sensitive information, including usernames and passwords, can be leaked to malicious parties. The main objective of this research was to investigate the strength of TLS encryption of websites listed on Nasdaq Helsinki and to examine whether these websites have been encrypted with a sufficiently strong TLS encryption. The sub-objective of this research was to develop a tool that can be used to collect information regarding the TLS encryption of websites. The theoretical section of the research introduces the key concepts related to websites and focuses on TLS encryption. The end of the theory section includes an explanation of the importance of using secure TLS encryption, as well as a compilation of the recommended minimum level of TLS encryption, which was compared against the TLS encryption of the collected websites. The developed tool was used to collect 4431 public websites of Nasdaq Helsinki, and their TLS encryption strength was assessed. The tool was also released for public use, so anyone can use or develop it for their own purposes. The research findings showed that only 3.5 percent of the collected websites met all the TLS encryption recommendations. This finding suggests that the TLS encryption strength of the websites would require improvement. The research also reviewed all the ten TLS encryption recommendation settings to see the most common reasons why the websites did not meet the recommendations. Most commonly, flaws were found in the lack of cryptographic sets, OCSP stapling, and HSTS. This research also considered reasons why the different settings of TLS encryption on the websites did not meet general recommendations, however, finding the actual reasons behind this phenomenon were left for future research, as it was not among the objectives of this research.", "language": "en", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by Miia Hakanen (mihakane@jyu.fi) on 2022-06-08T06:37:58Z\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2022-06-08T06:37:58Z (GMT). No. of bitstreams: 0\n Previous issue date: 2022", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "147", "language": "", "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.format.mimetype", "value": "application/pdf", "language": null, "element": "format", "qualifier": "mimetype", "schema": "dc"}, {"key": "dc.language.iso", "value": "fin", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.subject.other", "value": "TLS", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "HTTPS", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "verkkosivu", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "Nasdaq Helsinki", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "X.509", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.title", "value": "Verkkosivujen TLS-salauksen taso Helsingin p\u00f6rssiyhti\u00f6ill\u00e4", "language": "", "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "master thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-202206083171", "language": "", "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Pro gradu -tutkielma", "language": "fi", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Master\u2019s thesis", "language": "en", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Informaatioteknologia", "language": "fi", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Information Technology", "language": "en", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Kyberturvallisuus", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Kyberturvallisuus", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "yvv.contractresearch.funding", "value": "0", "language": "", "element": "contractresearch", "qualifier": "funding", "schema": "yvv"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_bdcc", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "masterThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.subject.oppiainekoodi", "value": "601", "language": "", "element": "subject", "qualifier": "oppiainekoodi", "schema": "dc"}, {"key": "dc.subject.yso", "value": "kyberturvallisuus", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "WWW-sivut", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "Internet", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "verkkosivustot", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "salaus", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "varmenteet", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "verkkotunnukset", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.format.content", "value": "fulltext", "language": null, "element": "format", "qualifier": "content", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}, {"key": "dc.type.okm", "value": "G2", "language": null, "element": "type", "qualifier": "okm", "schema": "dc"}]
|