Desarrollo de un software de cifrado de información sensible para el Centro de Respuesta a Incidentes de Seguridad Informática de la Escuela Politécnica Nacional (CSIRT-EPN)

Abstract

This work aims to develop a desktop application for Windows and Linux platforms that guarantees the confidentiality and integrity of sensitive information that is handled within the National Polytechnic School. An analysis was made of the current situation of the CSIRT-EPN, the organization in charge of computer security at the institution, where certain limitations were found due to the software used to carry out encryption activities, since its characteristics did not meet the security needs of the institution. In addition, the EPN's encryption policy was consulted to adapt the project to the security regulations that are imposed on it. Then, the Scrum framework under which the application was developed was selected along with a set of tools necessary to implement the application. Subsequently, the steps described in Scrum were applied. This led to the compilation, design, implementation and testing of the requirements provided by the interested parties. It should be noted that, at the end of the implementation of each increase, functional tests were carried out in order to guarantee compliance with the objectives. Finally, the conclusions are presented, each one reflecting the fulfillment of the objectives set out in the project.