Análisis de vulnerabilidades insiders para redes de campus académicas aplicando la metodología OSSTMM. Caso práctico red del edificio de la FIE-ESPOCH

Abstract

The objective of this degree work was to analyze the insider vulnerabilities related to the transport layer in the building network of the Informatics and Electronics Faculty (FIE) from the Escuela Superior Politécnica de Chimborazo (ESPOCH). To do so, an analysis of the traffic of the FIE-ESPOCH building network was carried out with the Nids-Snort tool with which the threats and attacks to which the network is exposed were determined. An adaptation of the Open Security Verification Methodology Manual (OSSTMM) was applied to determine the state of security in the building's human channels and data network and, in addition, the existing insider vulnerabilities were determined by performing a vulnerability scan with the Nexpose tool. Subsequently, the exploitation of previously selected vulnerabilities and threats was carried out based on the most common and risky ones, this was done in a virtual environment developed in the GNS3 simulator. Finally, a solution guide for exploited vulnerabilities and threats was proposed, indicating solution options for different operating systems with captures and steps to follow for a correct application on the affected system or equipment. As a result, it was obtained that the security status in the channels is low due to the presence of a large number of vulnerabilities in the equipment, requiring more controls and limitations. As a recommendation, it is advised that equipment should be kept updated to reduce the number of threats to which they are exposed.