Análisis y comparación de vulnerabilidades de ejecución remota de código en un ambiente linux y windows para un servicio web y para un servicio DNS para prevenir la capacidad de acceder y cambiar la propiedad de un servidor
Fecha
2022-09
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad de Guayaquil. Facultad de Ciencias Matemáticas y Físicas. Carrera de Ingeniería en Networking y Telecomunicaciones
Resumen
La problemática que se presenta en la actualidad corresponde al gran uso de la tecnología por parte de las empresas y los ciudadanos en general, lo cual se ha incrementado debido a la pandemia de Covid-19 que afectó a todo el mundo, lo cual aumenta la posibilidad de presencia de brechas de seguridad que se pueden hallar en una gran cantidad de sistemas informáticos. Por esta razón se tomó la decisión de realizar un análisis de vulnerabilidades de ejecución remota de código que se puedan presentar en servidores web y DNS en sistemas operativos Linux y Windows, por medio del uso de herramientas de virtualización donde se implementan sistemas operativos como Kali Linux, donde se utilizan distintas herramientas para llevar a cabo un análisis de vulnerabilidades, estas herramientas son Nessus, Nmap, Nikto con las cuales se examina las posibles vulnerabilidades que puedan tener otros equipos dentro de la misma red. Con base a los análisis realizados se toman medidas para mitigar las vulnerabilidades encontradas en los distintos sistemas operativos, y evitar sufrir ataques informáticos por medio de ellas. Para la ejecución del presente proyecto se utilizó la metodología PMI la cual lo divide en etapas y así trabajar de la manera más eficiente. De esta manera se concluye con la factibilidad de este proyecto es positiva debido a que permite evaluar la seguridad de un sistema informático y llevar a cabo soluciones en caso de ser necesario.
The problem that is currently presented corresponds to the great use of technology by companies and citizens in general, which has increased due to the Covid-19 pandemic that affected the whole world, which increases the possibility of the presence of security breaches that can be found in a large number of computer systems. For this reason, the decision was made to carry out an analysis of remote code execution vulnerabilities that can occur in web and DNS servers in Linux and Windows operating systems, through the use of virtualization tools where operating systems such as Kali Linux are implemented. Where different tools are used to carry out a vulnerability analysis, these tools are Nessus, Nmap, Nikto with which the possible vulnerabilities that other computers may have within the same network are examined. Based on the analyzes carried out, measures are taken to mitigate the vulnerabilities found in the different operating systems and avoid suffering computer attacks through them. For the execution of this project, the PMI methodology was used, which divides it into stages and thus work in the most efficient way. In this way, it is concluded that the feasibility of this project is positive because it allows evaluating the security of a computer system and carrying out solutions if necessary.
The problem that is currently presented corresponds to the great use of technology by companies and citizens in general, which has increased due to the Covid-19 pandemic that affected the whole world, which increases the possibility of the presence of security breaches that can be found in a large number of computer systems. For this reason, the decision was made to carry out an analysis of remote code execution vulnerabilities that can occur in web and DNS servers in Linux and Windows operating systems, through the use of virtualization tools where operating systems such as Kali Linux are implemented. Where different tools are used to carry out a vulnerability analysis, these tools are Nessus, Nmap, Nikto with which the possible vulnerabilities that other computers may have within the same network are examined. Based on the analyzes carried out, measures are taken to mitigate the vulnerabilities found in the different operating systems and avoid suffering computer attacks through them. For the execution of this project, the PMI methodology was used, which divides it into stages and thus work in the most efficient way. In this way, it is concluded that the feasibility of this project is positive because it allows evaluating the security of a computer system and carrying out solutions if necessary.
Descripción
PDF
Palabras clave
Ciberseguridad, Vulnerabilidades, Ejecución remota de código, Kali Linux, Servidores