Propuesta de implementación de un ambiente dinámico de malware basado en Cuckoo Sandbox para la red local del edificio de la FIE-ESPOCH.

Abstract

A dynamic environment System of malware detection based on Cuckoo Sandbox was designed and developed for the local network of the Building of Informatics and Electronics Faculty of Escuela Superior Politécnica de Chimborazo, where the Inductive-Deductive method was used for the collection and analysis of information. The analysis, design, implementation, execution and verification of results were made, which showed that Open Source tool “Cuckoo Sandbox” allows to study the malware behavior. The methodology Ec-Council Ethical Hacker, Scanning, Identification of Vulnerabilities, and Penetration to the System for the simulation of computer attacks followed. The Kali Linux 2016.2 operating system completed these steps, which is based on Debian GNU/Linux designed mainly for auditing and computer security and has tools that allow attacking servers, in the same way as a possible attacker computer science would do it. The cuckoo sandbox offers the possibility of connecting every action taken by the malware in the virtual machine, to observe the behavior and purpose of the malware once it enters the network. The automated system Cuckoo Sandbox analyzed the behavior of malware in the network, it conclude that implementing security mechanisms ensures an acceptable level of security in the transition of data over the local network and it recommended to implemented security polices customized for the data network of the building of Informatics and Electronics Faculty of Escuela Superior Politécnica de Chimborazo.