Zlatan Moric

Dr. Zlatan Moric

Department of System Engineering and Cybersecurity, Algebra University, Zagreb, Zagreb, Grad, Croatia
orcid

Research Focus & Metrics

Academic Career Length

14Years (2013-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
Verified
Journal Article
Open access
PDF file
Zlatan MoricZlatan Moric
Zlatan Moric
Vedran DakicVedran Dakic
Vedran Dakic
DĐDaniela Đekić
Daniela Đekić
DRDamir Regvart
Damir Regvart
This paper examines the impact of stringent regulations on personal data protection on customer perception of data security and online shopping behavior. In the context of the rapidly expanding e-commerce landscape, ensuring the security of personal data is a complex and crucial task. The study of several legal frameworks, including Malaysia’s compliance with EU regulations and Indonesia’s Personal Data Protection Law, provides valuable insights into consumer data protection. The challenges of balancing data safeguarding and unrestricted movement and tackling misuse by external entities are significant and require careful consideration. This research elucidates the pivotal role of trust in e-commerce environments and the deployment of innovative e-commerce models designed to minimize personal data sharing. By integrating advanced privacy-enhancing technologies and adhering to stringent regulatory standards such as the GDPR, this study demonstrates effective strategies for robust data protection. The paper contributes to the academic discourse by providing a comprehensive framework that synergizes legal, technological, and procedural elements to fortify data security and enhance consumer trust in digital marketplaces. This approach aligns with international data protection standards and offers a pragmatic blueprint for achieving sustainable data security in e-commerce.

31 January 2025 in Informatics
Verified
Journal Article
Open access
PDF file
Zlatan MoricZlatan Moric
Zlatan Moric
Vedran DakicVedran Dakic
Vedran Dakic
DRDamir Regvart
Damir Regvart
Cybersecurity threats are becoming more intricate, requiring preemptive actions to safeguard digital assets. This paper examines the function of honeypots as critical instruments for threat detection, analysis, and mitigation. A novel methodology for comparative analysis of honeypots is presented, offering a systematic framework to assess their efficacy. Seven honeypot solutions, namely Dionaea, Cowrie, Honeyd, Kippo, Amun, Glastopf, and Thug, are analyzed, encompassing various categories, including SSH and HTTP honeypots. The solutions are assessed via simulated network attacks and comparative analyses based on established criteria, including detection range, reliability, scalability, and data integrity. Dionaea and Cowrie exhibited remarkable versatility and precision, whereas Honeyd revealed scalability benefits despite encountering data quality issues. The research emphasizes the smooth incorporation of honeypots with current security protocols, including firewalls and incident response strategies, while offering comprehensive insights into attackers’ tactics, techniques, and procedures (TTPs). Emerging trends are examined, such as incorporating machine learning for adaptive detection and creating cloud-based honeypots. Recommendations for optimizing honeypot deployment include strategic placement, comprehensive monitoring, and ongoing updates. This research provides a detailed framework for selecting and implementing honeypots customized to organizational requirements.

17 February 2025 in Systems
Verified
Journal Article
Open access
PDF file
Zlatan MoricZlatan Moric
Zlatan Moric
Vedran DakicVedran Dakic
Vedran Dakic
SUSiniša Urošev
Siniša Urošev
Judicial decision-making in continental law systems requires carefully evaluating complex, interdependent evidence while ensuring consistency and fairness. This study investigates the application of Bayesian networks in structuring legal evidence within an AI-based decision support system. The primary research objective is to assess the enhancement of transparency, minimization of cognitive overload, and reduced bias in judicial processes through probabilistic reasoning. The proposed system dynamically updates outcome probabilities as new evidence is introduced, enabling real-time monitoring of case likelihoods. AI-generated recommendations are aligned with judicial precedents by integrating Conditional Probability Tables (CPTs) and historical case data in this adaptive approach. The interpretability and effectiveness of Bayesian inference in legal decision support are analyzed methodologically, emphasizing its capacity to refine probability distributions in response to evolving courtroom inputs. The findings address a key research gap by demonstrating how structured AI-driven heuristics can supplement judicial reasoning while maintaining decision accountability and transparency. The system is suggested to enhance consistency and fairness in legal judgments while preserving judicial autonomy. This study contributes to the growing intersection of AI and legal decision-making, with an emphasis placed on the role of machine learning in supporting judicial heuristics while maintaining procedural integrity.

Verified
Journal Article
Open access
PDF file
Vedran DakicVedran Dakic
Vedran Dakic
Zlatan MoricZlatan Moric
Zlatan Moric
AKAna Kapulica
Ana Kapulica
DRDamir Regvart
Damir Regvart
The Zero Trust Architecture (ZTA) security system follows the “never trust, always verify” principle. The process constantly verifies users and devices trying to access resources. This paper describes how Microsoft Azure uses ZTA to enforce strict identity verification and access rules across the cloud environment to improve security. Implementation takes time and effort. Azure’s extensive services and customizations require careful design and implementation. Azure administrators need help navigating and changing configurations due to its complex user interface (UI). Each Azure ecosystem component must meet ZTA criteria. ZTAs comprehensive policy definitions, multi-factor and passwordless authentication, and other advanced features are tested in a mid-size business scenario. The document delineates several principal findings concerning the execution of Azure’s ZTA within mid-sized enterprises. Azure ZTA significantly improves security by reducing attack surfaces via ongoing identity verification, stringent access controls, and micro-segmentation. Nonetheless, its execution is resource-demanding and intricate, necessitating considerable expertise and meticulous planning. A notable disparity exists between theoretical ZTA frameworks and their practical implementation, characterized by disjointed management interfaces and user fatigue resulting from incessant authentication requests. The case studies indicate that although Zero Trust Architecture enhances organizational security and mitigates risks, it may disrupt operations and adversely affect user experience, particularly in hybrid and fully cloud-based settings. The study underscores the necessity for customized configurations and the equilibrium between security and usability to ensure effective ZTA implementation.

Verified
Journal Article
Open access
PDF file
Zlatan MoricZlatan Moric
Zlatan Moric
Vedran DakicVedran Dakic
Vedran Dakic
TČTomislav Čavala
Tomislav Čavala
Containerized applications are pivotal to contemporary cloud-native architectures, yet they present novel security challenges. Kubernetes, a prevalent open-source platform for container orchestration, provides robust automation but lacks inherent security measures. The intricate architecture and scattered security documentation may result in misconfigurations and vulnerabilities, jeopardizing system confidentiality, integrity, and availability. This paper analyzes the key aspects of Kubernetes security by combining theoretical examination with practical application, concentrating on architectural hardening, access control, image security, and compliance assessment. The text commences with a synopsis of Kubernetes architecture, networking, and storage, analyzing prevalent security issues in containerized environments. The emphasis transitions to practical methodologies for safeguarding clusters, encompassing image scanning, authentication and authorization, monitoring, and logging. The paper also examines recognized Kubernetes CVEs and illustrates vulnerability scanning on a local cluster. The objective is to deliver explicit, implementable recommendations for enhancing Kubernetes security, assisting organizations in constructing more robust containerized systems.

19 November 2024 in Electronics
Verified
Journal Article
Open access
PDF file
Zlatan MoricZlatan Moric
Zlatan Moric
Vedran DakicVedran Dakic
Vedran Dakic
AKAna Kapulica
Ana Kapulica
DRDamir Regvart
Damir Regvart
This article delves into Microsoft Azure’s cyber forensic capabilities, focusing on the unique challenges in cloud security incident investigation. Cloud services are growing in popularity, and Azure’s shared responsibility model, multi-tenant nature, and dynamically scalable resources offer unique advantages and complexities for digital forensics. These factors complicate forensic evidence collection, preservation, and analysis. Data collection, logging, and virtual machine analysis are covered, considering physical infrastructure restrictions and cloud data transience. It evaluates Azure-native and third-party forensic tools and recommends methods that ensure effective investigations while adhering to legal and regulatory standards. It also describes how AI and machine learning automate data analysis in forensic investigations, improving speed and accuracy. This integration advances cyber forensic methods and sets new standards for future innovations. Unified Audit Logs (UALs) in Azure are examined, focusing on how Azure Data Explorer and Kusto Query Language (KQL) can effectively parse and query large datasets and unstructured data to detect sophisticated cyber threats. The findings provide a framework for other organizations to improve forensic analysis, advancing cloud cyber forensics while bridging theoretical practices and practical applications, enhancing organizations’ ability to combat increasingly sophisticated cybercrime.