Implementación de servicios de seguridad en redes mediante DevOps : implementación de un IDS mediante herramientas de DevOps.

Abstract

The degree work focuses on automating the implementation of an intrusion detection system using Ansible. This system employs Suricata for installation, configuration and rule addition, which improves the speed, security, efficiency and management of the deployment process. The project is divided into five main sections. First, a description of the project components is presented, explaining the overall objective and the specific objectives that guide the achievement of the expected result. In addition, the scope of the project is established, defining the limits and the approach to be maintained. Finally, in this introductory section, the theoretical and technical concepts required for the deployment of an intrusion detection system based on Ansible are presented. In the methodology section, the steps followed to achieve each specific objective are detailed, along with a justification supporting the choice of each approach. The techniques and procedures used to ensure effective implementation are described here. The results section provides a detailed explanation of the progress and achievements made in each phase of the project. Each proposed solution is analyzed and described, the architectures for each solution are designed, and the implementation of the DevOps and IDS tools are outlined. In addition, the tests performed to validate the functionality and effectiveness of the system are documented. In the conclusions, the key aspects of the project are highlighted, based on the implementation performed. Finally, in the recommendations, useful suggestions are provided for those who wish to carry out similar projects, offering guidelines that will facilitate the replication and improvement of the intrusion detection system.