ANDRIJA KOZINA

Prof. Dr. ANDRIJA KOZINA

University of Zagreb, Zagreb, Zagreb, Grad, Croatia
orcid
Dr. Franjo Tuđman Defense and Security University

Research Focus & Metrics

Academic Career Length

15Years (2012-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
3 April 2021 in Symmetry
Verified
Journal Article
Open access
PDF file
William SteingartnerWilliam Steingartner
William Steingartner
DGDarko Galinec
Darko Galinec
ANDRIJA KOZINAANDRIJA KOZINA
ANDRIJA KOZINA
This paper aims to explore the cyber-deception-based approach and to design a novel conceptual model of hybrid threats that includes deception methods. Security programs primarily focus on prevention-based strategies aimed at stopping attackers from getting into the network. These programs attempt to use hardened perimeters and endpoint defenses by recognizing and blocking malicious activities to detect and stop attackers before they can get in. Most organizations implement such a strategy by fortifying their networks with defense-in-depth through layered prevention controls. Detection controls are usually placed to augment prevention at the perimeter, and not as consistently deployed for in-network threat detection. This architecture leaves detection gaps that are difficult to fill with existing security controls not specifically designed for that role. Rather than using prevention alone, a strategy that attackers have consistently succeeded against, defenders are adopting a more balanced strategy that includes detection and response. Most organizations deploy an intrusion detection system (IDS) or next-generation firewall that picks up known attacks or attempts to pattern match for identification. Other detection tools use monitoring, traffic, or behavioral analysis. These reactive defenses are designed to detect once they are attacked yet often fail. They also have some limitations because they are not designed to catch credential harvesting or attacks based on what appears as authorized access. They are also often seen as complex and prone to false positives, adding to analyst alert fatigue. The security industry has focused recent innovation on finding more accurate ways to recognize malicious activity with technologies such as user and entity behavioral analytics (UEBA), big data, artificial intelligence (AI), and deception.

1 January 2019 in Connections: The Quarterly Journal
Verified
Journal Article
Closed access
PDF file
ANDRIJA KOZINAANDRIJA KOZINA
ANDRIJA KOZINA

7 May 2024 in Policija i sigurnost
Verified
Journal Article
Open access
PDF file
JHJadranka Herceg
Jadranka Herceg
ANDRIJA KOZINAANDRIJA KOZINA
ANDRIJA KOZINA
Osobe koje su uključene u akademsku djelatnost tijekom razvoja karijere preuzimaju više profesionalnih uloga: nastavničku, upravljačku, istraživačku te pridonositelja društvu i zajednici. Za realizaciju svake navedene uloge osoba mora ovladati odgova...

1 January 2015 in Security and Defence Quarterly
Verified
Journal Article
Open access
ANDRIJA KOZINAANDRIJA KOZINA
ANDRIJA KOZINA
Military education, as an integral and inseparable part of building the army as an institution, is changing its identity and tends to be becoming a place of development, changes, scientific research, quality teaching and education. Adoption of the National Curriculum Framework is creating...