Análisis de vulnerabilidades en el uso de las redes sociales en ciber ataques de ingeniería social para fortalecer la seguridad de la información en la Facultad de Ciencias Humanas y de la Educación, de la Universidad Técnica de Ambato.

Abstract

Social Engineering is a set of techniques that allow obtaining confidential information through the manipulation of people. In a practical way, it is an ability that certain people make use of to obtain information, access to information systems that allow them to carry out some act that harms or exposes the person or organization involved.

For the development of this project, the DigitalOcean platform was used for the virtualized cloud service, the Gophish framework was used for the creation, planning and execution of attack simulation, using the Phishing technique and the Hunter.io tool for the discovery and collection of emails.

It is important to evaluate the security of computer systems that handle information of the institution, however, the human component that manipulates this, can become a source of disclosure of the same, being useful for an attacker. Therefore, it is of vital importance to know the level of cybersecurity awareness of students and teachers.

The main objective of these tests is to strengthen Information Security in the institution, reinforcing the security awareness of students and teachers of the Faculty of Human Sciences and Education, preparing them to face different risk scenarios that could occur in the event of a real attack.