Diseño de un protocolo de seguridad post-evento informático basado en la norma ISO/IEC-17799 para la Facultad de Ingeniería Industrial.
No hay miniatura disponible
Fecha
2018-09-11
Autores
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad de Guayaquil. Facultad de Ingeniería Industrial. Carrera de Ingeniería en Teleinformática.
Resumen
La presente investigación está basada en cómo actuar en diferentes post-eventos informáticos que se haya generado en la facultad de ingeniería industrial, es decir, las vulnerabilidades que se encuentren en los sistemas operativos, aplicaciones, base de datos, software que se utilicen dentro la institución y el hardware que puedan ocasionar la perdida de información o alterar las bases datos, por lo tanto, todos los equipos que se encuentren dentro de la infraestructura, es decir, servidores y computadoras en áreas administrativas deben tener vigente los antivirus y todas las firmas actualizadas al día, por la tanto, este proyecto muestra el diseño del protocolo basado en la norma ISO/IEC-17799 que permita generar buenas prácticas en la seguridad de la información por lo que se mantiene la base de datos seguras. La seguridad informática y de información es la disciplina que se encarga de implementar los procedimientos, normas, técnicas y métodos que se designa para conseguir que el sistema de información sea confiable y seguro. Este protocolo se realizó como proyecto de tesis por lo que es un activo importante que debe poseer una organización este protocolo de seguridad aseguran tanto la parte física (hardware) y la lógica (software) y las mantiene protegidas basándose de los protocolos de seguridad de la información propuestos en este proyecto.
This research is based on how to proceed in different computer post-events that have been generated in the Industrial Engineering faculty of the University of Guayaquil, that means how to find all the vulnerabilities that can be detected on the operative systems, applications, database, the software that is used in the institution and also the hardware that may cause the loss of information or alter them, therefore all the equipment that is inside the infrastructure, that means: servers and computers in administrative department that have the antivirus licenses and other signatures must have been updated. This project shows the design of the protocol based on the ISO / IEC-17799 standard that allows to generate good practices in information security, which is why the secure database is maintained. Computer and information security is the discipline that is responsible for implementing procedures, standards, techniques and methods that are designed to make the information system reliable and safe. This protocol was made as a thesis project so it is an important asset that an organization must have; this security protocol ensure both the physical (hardware) and logic (software), and keeps them protected based on the security protocol of information that is proposed in this project.
This research is based on how to proceed in different computer post-events that have been generated in the Industrial Engineering faculty of the University of Guayaquil, that means how to find all the vulnerabilities that can be detected on the operative systems, applications, database, the software that is used in the institution and also the hardware that may cause the loss of information or alter them, therefore all the equipment that is inside the infrastructure, that means: servers and computers in administrative department that have the antivirus licenses and other signatures must have been updated. This project shows the design of the protocol based on the ISO / IEC-17799 standard that allows to generate good practices in information security, which is why the secure database is maintained. Computer and information security is the discipline that is responsible for implementing procedures, standards, techniques and methods that are designed to make the information system reliable and safe. This protocol was made as a thesis project so it is an important asset that an organization must have; this security protocol ensure both the physical (hardware) and logic (software), and keeps them protected based on the security protocol of information that is proposed in this project.
Descripción
Este documento contiene archivo en PDF.
Palabras clave
TECNOLOGÍA DE ORDENADORES, SISTEMA EN TIEMPO REAL, SEGURIDAD INFORMÁTICA, VULNERABILIDADES