Análisis de la seguridad de aplicaciones web críticas del Municipio del distrito metropolitano de Quito

Abstract

The objective of the present titling work is to carry out a security analysis on the two most critical web applications of the Municipality of the Metropolitan District of Quito (MDMQ), with the purpose of verifying whether or not there are vulnerabilities that can be exploited. First, there is an introduction to Information Security, the importance of maintaining and developing secure web applications. It also discusses the main risks, attacks and threats to which applications and web portals are exposed on the Internet. Then, the current situation analysis is performed to verify the safety management within the MDMQ. The analysis is then performed to identify the two most critical web applications on which the penetration tests are performed, based on the OWASP (Open Web Application Security Project) version four. The following describes each of the security tests to be performed on the MDMQ's most critical web applications and portals. Finally, the results are presented, an analysis of them is carried out and forms of vulnerability mitigation are presented.