Αυτοματοποίηση ανάπτυξης υποδομών για την διαμόρφωση ασφαλείας συστημάτων
Automation of infrastructure deployment for system security configurations

Bachelor Dissertation
Author
Ναλπαντίδης, Κωνσταντίνος
Date
2025-02Advisor
Κοτζανικολάου, ΠαναγιώτηςView/ Open
Keywords
Τεχνολογίες αυτοματοποίησης υποδομών ; Τεχνολογίες container ; Εσκεμμένα ευπαθείς υποδομές ; Μελέτη σεναρίων ασφάλειας ; Ενίσχυση ασφάλειας ; Εργαλεία αυτοματισμού ; Υποδομή ; Συγγραφή κώδικα ; Ασφάλεια web εφαρμογών ; Εσκεμμένα ευπαθείς εφαρμογές ; Web application firewall ; Αυτοματισμός ; Δημιουργία υποδομών ; Ερευνητικοί σκοποί ; ΚλιμάκωσηAbstract
This thesis analyzes infrastructure automation and container technologies to create deliberately vulnerable infrastructures, for the purpose of studying security scenarios and for identifying tools that enhance their security. Initially, an analysis of existing automation tools is conducted to select the most suitable ones for the desired scenario. Then, the infrastructure design and the creation of its individual components are presented to document their characteristics and facilitate the writing of code for their automation. Similarly, web application security is analyzed, and a comparison of well-known deliberately vulnerable web applications is carried out to determine their usability in security studies. Based on this analysis, both the application that meets the project's needs and the web application firewall for its protection are selected. In conclusion, this study examines how infrastructure automation can accelerate the creation of infrastructures for research purposes and whether it can also be applied to everyday scenarios, such as companies needing to secure their infrastructure at different scale levels.