Ingeniería social a través de medios informáticos, análisis de las posibles amenazas existentes en la facultad de ciencias administrativas de la universidad de Guayaquil
No hay miniatura disponible
Fecha
2015
Título de la revista
ISSN de la revista
Título del volumen
Editor
Resumen
La presente aplicación trata sobre un estudio y análisis del uso de la ingeniería social con el fin de realizar ataques informáticos, pone en peligro a las entidades públicas y privadas, como la facultad de ciencias administrativas de la universidad de guayaquil, para demostrar lo perjudicial que puede ser el tratamiento indebido de esta técnica se plantea los siguientes métodos: un cuestionario, phishing y la creación de un punto de acceso falso dentro de la facultad, la encuesta será aplicada con el uso de la ingeniería social además de que dentro de ellas existen preguntas que pretenden sacar información personal, luego se aplicara phishing usando la página de la facultad como base del desarrollo, y la creación de un punto falso utilizando la ingeniería social para atraer a los usuario y así poder robar credenciales. los resultados obtenidos fueron: existe un mediano conocimiento sobre el manejo de la información personal frente a una encuesta, las personas utilizan como principal red social facebook por lo que ejecución del phishing fue efectiva en cuanto a la obtención de datos personales y claves de acceso, con la creación del punto de acceso falso se puedo obtener un número considerable de suscritores a la red permitiendo receptar paquetes con claves, datos personales y cuentas bancarias, la solución sería la capacitación y mejoramiento de políticas y procedimientos al momento de tratar la información institucional y personal.
This application deals with a study and analysis of the use of social engineering in order to carry out cyber attacks, endangers public and private entities, such as the Faculty of Administrative Sciences of the University of Guayaquil, to demonstrate how damaging may be improper treatment of this technique the following methods arises: a questionnaire, phishing and creating a false point of access within the faculty, the survey will be applied to the use of social engineering also that within them there questions that seek out personal information, then applied using phishing page of the faculty as a basis for development, and creating a false point using social engineering to entice users so they can steal credentials. the results were: there is a medium knowledge about the handling of personal information from a survey, people use as the main social network facebook so that execution of phishing was effective in terms of the collection of personal data and passwords, with the creation of false point of access I can get a considerable number of subscribers to the network allowing both receive packages with passwords, personal data and bank accounts, the solution would be training and improvement of policies and procedures when dealing institutional information and personal.
This application deals with a study and analysis of the use of social engineering in order to carry out cyber attacks, endangers public and private entities, such as the Faculty of Administrative Sciences of the University of Guayaquil, to demonstrate how damaging may be improper treatment of this technique the following methods arises: a questionnaire, phishing and creating a false point of access within the faculty, the survey will be applied to the use of social engineering also that within them there questions that seek out personal information, then applied using phishing page of the faculty as a basis for development, and creating a false point using social engineering to entice users so they can steal credentials. the results were: there is a medium knowledge about the handling of personal information from a survey, people use as the main social network facebook so that execution of phishing was effective in terms of the collection of personal data and passwords, with the creation of false point of access I can get a considerable number of subscribers to the network allowing both receive packages with passwords, personal data and bank accounts, the solution would be training and improvement of policies and procedures when dealing institutional information and personal.
Descripción
Palabras clave
APLICACION, ESTUDIO Y ANALISIS, ATAQUES INFORMATICOS, ENTIDADES PUBLICAS Y PRIVADAS