Análisis sistémico de ataques de Spear Phishing utilizando inspección profunda de paquetes.

Abstract

In the present Master's degree work, an experimental platform is implemented to analyze the traffic of a data network and detect Spear Phishing attacks through the use of the Deep Packet Inspection (DPI) technique. The architecture is based on virtual network environments, together with open source tools used to raise controlled environments to simulate targeted mail attacks (Spear Phishing), which will be analyzed using the deep packet inspection (DPI) technique. In addition, the performance of the resources that make up the architecture is evaluated during the execution of the simulated attacks. Finally, a technical guide for the installation, implementation and configuration of the proposed architecture is generated in order to provide an input for the lifting of experimental solutions aimed at the early detection of targeted attacks.