Análisis de la tecnología Honeypot y su aplicación en la detección y corrección de vulnerabilidades en la red de datos del Gobierno Autónomo Descentralizado de la Provincia de Chimborazo.

Abstract

This work deals with the analysis, design, execution, execution and verification of results based on Honeypot technology in the data network of the Autonomous Decentralized Government of the province of Chimborazo, which allows the emulation of objectives And vulnerable services a flap of which the own compromises with the computer attackers, this way it knows the vulnerabilities that present the design of red, allowing us to make the pertinent corrections. For the simulation of computer attacks, the Ec-Council Ethical Hacker methodology was based on Footprinting, Digitization, Vulnerability Identification, System Penetration, Access Maintenance and Footprint Erase, to complete these steps, used BackTrack 5 R1, El Which is based on GNU / Linux and has the tools that make the vulnerable servers and the stations in the same way that would make a possible computer attacker. Through the implementation of Honeypot technology, it was possible to determine that 38.14% of the traffic generated in the data network of the Decentralized Autonomous Government of the Province of Chimborazo corresponds to NetBIOS traffic. Of the traffic with the highest incidence was verified that 47 attacks registered in the IDS, belonging to the NETBIOS SMB-DS attack srvsvcNetrPathCanonicalizeWriteAndX overflow were performed. By implementing the Honeynet, it was possible to capture the computer attacks that were carried out against the simulated objectives, which allows the management, formulation and execution of a customized security policy in the data network of the Decentralized Autonomous Government of the Province of Chimborazo.