Ana Kapulica

Ms. Ana Kapulica

orcid

Research Focus & Metrics

Academic Career Length

3Years (2024-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
Verified
Journal Article
Open access
PDF file
Vedran DakicVedran Dakic
Vedran Dakic
Zlatan MoricZlatan Moric
Zlatan Moric
AKAna Kapulica
Ana Kapulica
DRDamir Regvart
Damir Regvart
The Zero Trust Architecture (ZTA) security system follows the “never trust, always verify” principle. The process constantly verifies users and devices trying to access resources. This paper describes how Microsoft Azure uses ZTA to enforce strict identity verification and access rules across the cloud environment to improve security. Implementation takes time and effort. Azure’s extensive services and customizations require careful design and implementation. Azure administrators need help navigating and changing configurations due to its complex user interface (UI). Each Azure ecosystem component must meet ZTA criteria. ZTAs comprehensive policy definitions, multi-factor and passwordless authentication, and other advanced features are tested in a mid-size business scenario. The document delineates several principal findings concerning the execution of Azure’s ZTA within mid-sized enterprises. Azure ZTA significantly improves security by reducing attack surfaces via ongoing identity verification, stringent access controls, and micro-segmentation. Nonetheless, its execution is resource-demanding and intricate, necessitating considerable expertise and meticulous planning. A notable disparity exists between theoretical ZTA frameworks and their practical implementation, characterized by disjointed management interfaces and user fatigue resulting from incessant authentication requests. The case studies indicate that although Zero Trust Architecture enhances organizational security and mitigates risks, it may disrupt operations and adversely affect user experience, particularly in hybrid and fully cloud-based settings. The study underscores the necessity for customized configurations and the equilibrium between security and usability to ensure effective ZTA implementation.

19 November 2024 in Electronics
Verified
Journal Article
Open access
PDF file
Zlatan MoricZlatan Moric
Zlatan Moric
Vedran DakicVedran Dakic
Vedran Dakic
AKAna Kapulica
Ana Kapulica
DRDamir Regvart
Damir Regvart
This article delves into Microsoft Azure’s cyber forensic capabilities, focusing on the unique challenges in cloud security incident investigation. Cloud services are growing in popularity, and Azure’s shared responsibility model, multi-tenant nature, and dynamically scalable resources offer unique advantages and complexities for digital forensics. These factors complicate forensic evidence collection, preservation, and analysis. Data collection, logging, and virtual machine analysis are covered, considering physical infrastructure restrictions and cloud data transience. It evaluates Azure-native and third-party forensic tools and recommends methods that ensure effective investigations while adhering to legal and regulatory standards. It also describes how AI and machine learning automate data analysis in forensic investigations, improving speed and accuracy. This integration advances cyber forensic methods and sets new standards for future innovations. Unified Audit Logs (UALs) in Azure are examined, focusing on how Azure Data Explorer and Kusto Query Language (KQL) can effectively parse and query large datasets and unstructured data to detect sophisticated cyber threats. The findings provide a framework for other organizations to improve forensic analysis, advancing cloud cyber forensics while bridging theoretical practices and practical applications, enhancing organizations’ ability to combat increasingly sophisticated cybercrime.

18 July 2024 in Preprints.org
Verified
Preprint
Open access
PDF file
Vedran DakicVedran Dakic
Vedran Dakic
Zlatan MoricZlatan Moric
Zlatan Moric
AKAna Kapulica
Ana Kapulica
DRDamir Regvart
Damir Regvart
The Zero Trust Architecture (ZTA) security system follows the "never trust, always verify" principle. The process constantly verifies users and devices trying to access resources. This paper describes how Microsoft Azure uses ZTA to enforce strict identity verification and access rules across the cloud environment to improve security. Implementation is time-consuming and difficult. Azure's extensive services and customizations require careful design and implementation. Azure administrators struggle to navigate and change configurations due to its complex user interface (UI). Each Azure ecosystem component must meet ZTA criteria. ZTA's comprehensive policy definitions, multi-factor and pass-wordless authentication, and other advanced features are tested in a mid-size business scenario. These configuration changes require a solid grasp of Azure's architecture and Zero Trust. Implementing an Azure ZTA reduces vulnerabilities and restricts authorized users' access to critical resources. Implementation is time-consuming and expensive, requires a significant commitment to changing IT procedures, and can be confusing because the same features are available in multiple places. Azure ZTA has shown great potential for both hybrid and cloud-native companies.

1 May 2025 in Edelweiss Applied Science and Technology
Verified
Journal Article
Open access
PDF file
DRDamir Regvart
Damir Regvart
IBIvana Ogrizek Biškupić
Ivana Ogrizek Biškupić
AKAna Kapulica
Ana Kapulica
Secure, scalable, and flexible digital ecosystems are becoming increasingly important as universities undergo a digital transition. The Open Digital Architecture (ODA) framework from the TM Forum provides a platform for modernizing digital services and telecommunications operations, with essential applications in higher education. This study investigates the effective use of ODA's cloud-native, modular, and interoperable components to improve security in university operations. This paper examines how ODA's security capabilities may address issues specific to higher education by connecting ODA components to essential university operations, including research data protection, student lifecycle management, and campus-wide applications.