Küberkaitsealane õppemoodul sideväelasest ajateenijatele

Abstract

Antud lõputöö teema idee pärineb 2007 aastal toimunud sündmustest, kui Eestit tabas küberrünnakute laine. Tänu nendele rünnetele taipas valitsus, et sellise ohu vastu tuleb midagi ette võtta. Antud lõputöö eesmärk on luua õppemoodul Staabi- ja sidepataljoni ajateenijatele. Moodul on jagatud kolmeks suuremaks osaks. Esimene osa annab ülevaate erinevatest küberohtudest, teises osas vaadatakse üle mobiiltelefonidega seotud ohud ning viimases osas tegeletakse nö "šokiteraapiaga", kus tuuakse praktilisi näiteid läbi mille autor üritab näidata, kui lihtne on küberrünnakuid kasutades saada teada mingit infot. Töö peamine eesmärk on ajateenijatele anda uusi teadmisi, mida saab rakendada tsiviil elus, tutvustada oma sõpradele ja perekonnale ning tõsta üldist kasutaja teadlikkust vähendamaks küberrünnakute ohtu.

The topic of this Bachelor’s Thesis was inspired by the Cyber Attacks against Estonia in 2007. Those attacks made the government realize that Estonia needs a plan for this sort of weakness. The aim of the present Thesis is to provide an organized and structured learning module for conscripts in Staff and Signal Battalion. This module is divided into three major parts. The first part gives a short overview of different cyber threats what may affect a common user. In the second part, the author tries to enlighten users about threats that lurk in our everyday lives along with mobile phones. There are many threats to Internet and Bluetooth ready phones that might affect our everyday life. In the last part, the author tries to do some shock therapy. The aim of this module is to show, how simple it is to take over systems, hack into phones and steal some passwords. This is the part where it all sinks in and the conscripts realize how important it is to protect theirselves against cyber threat. The main purpose of this Thesis is to give something to conscripts what they can take with them back home and tell their friends, family. Also to teach risk free behaviour in IT related work and projects and to help prevent those kinds of cyber attacks occurred in 2007.