Implementación de servicios de seguridad en redes mediante DevOps : Implementación de un HIDS mediante herramientas de DevOp

Abstract

The project focuses on the implementation of network security services using DevOps. The overall objective is to deploy IT security solutions integrating DevOps tools. The specific objectives include the analysis of DevOps tools, the design of network security solutions, the implementation of these solutions and the verification of their performance. This approach ensures a structured development aligned with DevOps principles.

The scope of the project covers several key aspects. First, the deployment of a host-based intrusion detection system (HIDS) is automated using DevOps tools such as Ansible. In addition, a selected HIDS (Tripwire) is deployed and integrated using playbooks. Tests are performed to verify the correct implementation of the HIDS and detailed documentation describing the entire process is generated.

The theoretical framework addresses the fundamental concepts of HIDS and DevOps. A HIDS is a security system that monitors and analyzes the behavior of a host to detect malicious activity. DevOps, on the other hand, is a methodology that promotes the collaboration of development and operations teams in order to automate processes and improve efficiency. The integration of these two technologies makes it possible to create automated security solutions.

In order to implement, Ansible was used to deploy Tripwire through two playbooks. The first playbook handled the automated installation of Tripwire on the target systems, ensuring repeatable configuration. The second playbook was developed to apply new rules to the Tripwire policy document, allowing additional critical files to be monitored.

Once the playbooks were designed, initial testing was performed to validate their operation. These tests were essential to ensure that the added rules were set up correctly. The testing phase included verifying the correct installation of Tripwire and the application of the new monitoring rules. The results of these tests showed that the project objectives had been successfully achieved.