Análisis y evaluación de riesgos y vulnerabilidades del nuevo portal web de la Escuela Politécnica Nacional, utilizando metodologías de hackeo ético.

Abstract

This project aims to assess the level of security over the website of EPN by using ethical hacking techniques. Besides, some ethical hacking methodologies are described with the purpose of selecting the most appropriate for the case of study. In order to identify vulnerabilities, an analysis will be performed over the portal. Likewise, such vulnerabilities will have a description that includes the way of exploiting them as well as the effects to the website. In addition, for determining risks, several meetings will be arranged with employees of DGIP. Finally, based on the findings, several recommendations will be suggested in order to mitigate or reduce the likelihood of the risks found. Indeed, those recommendations would be improvements or fixes to be applied over the portal.