Método de despliegue y mejoramiento de la seguridad web en las pequeñas y medianas empresas (PYME) utilizando las características de seguridad de HTTP 2.0.

Abstract

The research work method of deployment and improvement of web security in small and medium-sized enterprises (SMES) using the security features of HTTP 2.0, carried out in the city of Riobamba benefits to system administrators to have performance and security in the web of SMES. The scientific method was used for having a series of stages that go from the exposition of the problem, the analysis and interpretation of results, and there was used the proposed method of deployment and improvement of the web safety which 7 phases are: recognition, exploration, obtaining access, exploitation of vulnerabilities, vulnerability assessment of HTTP 1.1, mitigating vulnerabilities with HTTP 2.0 and assessment of corrected vulnerabilities. The software used was Fedora 23 on servers by having the latest versions of Apache for HTTP 2.0, Kali Linux to search for and exploit vulnerabilities, VMware Workstation for virtualization, Nessus for scan vulnerabilities and, Slowloris for denial-of-service attacks. Implemented a practical stage in which compared to the vulnerabilities found HTTP 1.1 it is applied the characteristics of HTTP 2.0, and developed the practical guide to deploy HTTP 2.0 in servers. For the verification of the hypothesis the proposed method was applied, the indicators were compared, it applied descriptive statistics and SPSS was used. Results analysis concludes that HTTP 2.0 provides greater security, performance to manage information on the web and optimization of resources opposite to the HTTP 1.1, obtained an active vulnerability 14.58% and corrected of the 85.42% compared to 72.92% and 27.08% respectively with HTTP 1.1, sufficient grounds to recommend Systems Administrators to use the guide and maintain a continuous update in HTTP 2.0 which is still new and lack exploit.