Tesis Tecnologías de la Información

Permanent URI for this collectionhttp://repositorio.uta.edu.ec/handle/123456789/34849

Browse

Filter results by typing the first few letters
Now showing 1 - 1 of 1
  • Thumbnail Image
    Item
    Sistema de detección y prevención de intrusiones (IDPS) para mitigar vulnerabilidades en el acceso a la red de la Unidad Educativa “Pio Lopez”
    (2025-07) Alomaliza Chuca Brayan Stiven; Guevara Aulestia David Omar; Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Tecnologías de la Información
    Technological advancement in educational institutions has generated growing concern about cybersecurity. Protection against cyberattacks is essential to ensure the confidentiality, integrity, and availability of information within the "Pío López" educational institution. In response to this need, an Intrusion Detection and Prevention System (IDPS) was developed to strengthen infrastructure security and mitigate threats in an academic environment. The methodology applied in this project is ISO/IEC 27001, which consisted of four phases. In the first phase, a risk analysis was performed using Nmap for port and system scanning, and OpenVAS for vulnerability detection, obtaining a detailed diagnosis of the infrastructure. Some vulnerabilities and default configurations of the technological equipment were recorded. The second phase focused on the implementation of a centralized switch, an IDPS with Suricata, and integrating a visualization system with the ELK Stack. For the third phase, performance was evaluated through attack simulations, including Slowloris, DoS, and Man-in-the-Middle attacks, to verify the system's effectiveness, logging events, and proper operation. In the fourth phase, connection duration thresholds and data volumes were adjusted to improve the detection of slow attacks like Slowloris. As a result, the developed system proved to be robust and scalable, with a low operating cost. It was able to detect suspicious behavior and mitigate attacks in real time, significantly improving the security of the institutional network. The implemented IDPS provides a replicable model for other educational institutions, improving protection against cyberthreats.