Implementación de un Centro de Operaciones de Seguridad y Redes (NSOC) Usando Herramientas Open Source para la Infraestructura Industrial de la Empresa Eléctrica Quito.

Abstract

This work focuses on the field of network services to solve an inherent need of the Electricity Company of Quito (E.E.Q.), to find a technological solution that allows monitoring the industrial infrastructure of data networks at the level of active equipment and thus, manage its security. This degree work analyzed the main features of the NOC, SOC, NSOC, the computer tools used in their implementation, regulations, standards and good practices for the management of data and security networks in electricity companies. After having carried out a first study on the management and standards in force in electricity companies, a solution was designed for the implementation of a Network and Security Operations Center- NSOC using open-source tools considering the requirements requested by EEQ's technicians. The implemented solution allows monitoring of active network equipment and terminal equipment through the SNMP and ICMP protocols, event log analysis through the SYSLOG protocol, access tests and vulnerability management, report generation of early warnings.The implemented solution was deployed and tested in the infrastructure of E.E.Q., the results of these tests are shown in the testing phase chapter of this study. Finally, the conclusions are attached to the end of this work.