Implementación de servicios de seguridad en redes mediante DevOps : implementación de un IPS mediante herramientas de DevOps.

Abstract

The present curriculum integration project focused on implementing an advanced network security system using Snort 3.0 as an Intrusion Prevention System (IPS), automating the entire process through Ansible. A detailed playbook was developed, covering everything from installing prerequisites to configuring rules using YAML format files. The theoretical part explored key DevOps concepts and Snort's role in network security, alongside fundamental aspects of cybersecurity, automation options, and more. In the methodology section, ensuring project objectives were met involved describing each implementation and testing phase step-by-step. Results demonstrated the effectiveness of Snort rules in detecting and mitigating known and emerging threats, including DoS attacks, network scans, and attempts to access ports like SSH and Telnet. Thus, this project seamlessly combined theory and practice to deliver an automated, robust solution enhancing network security. Leveraging tools such as Ansible and Snort not only streamlined the setup and management of the prevention system but also significantly bolstered responsiveness against potential vulnerabilities and cyberattacks.