Nicola Poidomani
Design and Implementation of an Authentication and Authorization Framework for OpenC2.
Rel. Daniele Bringhenti, Fulvio Valenza. Politecnico di Torino, Corso di laurea magistrale in Cybersecurity, 2025
|
Preview |
PDF (Tesi_di_laurea)
- Tesi
Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (3MB) | Preview |
Abstract
The Open Command and Control (OpenC2) framework is emerging as a crucial standard for orchestrating and automating defensive cyber operations, enabling interoperability between heterogeneous security tools. However, the core specifications deliberately do not mandate specific security mechanisms, creating a critical gap that could expose the command and control infrastructure to unauthorized access and malicious manipulation. This thesis addresses this gap by designing, implementing, and evaluating a comprehensive authentication and authorization framework to secure the OpenC2 ecosystem. The proposed solution leverages industry-standard protocols to ensure robust and scalable security. For authentication and delegated access, we integrate the OAuth 2.0 framework, utilizing the Authorization Code grant flow to guarantee that only legitimate entities (Producers) can issue commands.
The implementation is developed in Python, using the Authlib library to build a dedicated Authorization Server responsible for token issuance and management
Relatori
Anno Accademico
Tipo di pubblicazione
Numero di pagine
Corso di laurea
Classe di laurea
URI
![]() |
Modifica (riservato agli operatori) |
