Propuesta de Best Practice para el análisis de vulnerabilidades, métodos de prevención y protección aplicados a la infraestructura de red del Laboratorio de Sistemas.

Abstract

This research was done for making a vulnerability analysis and a proposal guide to develop better practices in laboratories of the Systems Engineering School of the ESPOCH. Free software Backtrack 5 was used, as a set of tools for checking vulnerabilities in computer security or network infrastructure or information systems, by applying a professional safety methodology, ethical hacker, based on a deductive-inductive analysis. The vulnerability analysis determined that there is a 4% of equipment’s which are in high risk of attack; 8% are in medium risk and the remaining ones are in low risk. To achieve greater reliability from these results, at least two times of each type of computer attacks was done, using metaesploit to propose a methodology with better practices for information security; following the guidelines of International Standards ISO/IEC 17799, which will help to mitigate safety deficiencies. By applying the methodology proposed as an ethical hacker, a thorough analysis of network infrastructure was achieved; protocols and applications that are in use in the computer systems in the Systems School. It is recommended to the network administrators, to apply these proposed policies which set the best practices in information security.