Análisis de vulnerabilidades de una infraestructura de red utilizando metodologías de ethical hacking.

Abstract

The objective of this thesis is to analyze the vulnerabilities of the FIS network infrastructure using ethical hacking methods based on the ISSAF methodology. This analysis will set a precedent and raise awareness among the personnel responsible for the current state of security in this infrastructure, this being the first step in planning future strategies and actions that will bring the FIS to an expected point. The methodology has a structure that covers the different aspects of the infrastructure, starting with the collection of information about the FIS EPN, understanding its characterization, mission, vision and organizational structure. Next, the virtual and physical connectivity is analyzed using the different tools for this task, which allows obtaining a map or topology of the network. Based on the topology obtained, a series of processes are designed as tests to identify the vulnerabilities present in the FIS infrastructure with the structure defined by ISSAF. At the end of each test, the vulnerabilities found in each element of the infrastructure are obtained.