Ingeniería en Sistemas, Electrónica e Industrial

URI permanente para esta comunidadhttp://repositorio.uta.edu.ec/handle/123456789/1

Examinar

Filtros

2020 - 20267

Ajustes

Fecha de inicio: 2020Tema: search.filters.subject.SEGURIDAD INFORMÁTICA

Resultados de la búsqueda

Mostrando 1 - 7 de 7
  • Miniatura
    Item type:Ítem,
    Cis critical security controls (CIS CONTROLS) para la mitigación de vulnerabilidades de seguridad en la infraestructura de red de la Unidad Educativa General Eloy Alfaro de la ciudad de Salcedo.
    (Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas Electrónica e Industrial. Carrera de Tecnologías de la Información., 2026-01)
    Quispe Silva, Carlos David
    ;
    Guevara Aulestia, David Omar
    ;
    Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas Electrónica e Industrial. Carrera de Tecnologías de la Información.
    The growing technological dependence in educational institutions has turned information systems into critical assets, which underscores the need to implement robust cybersecurity strategies to protect confidential data and ensure operational continuity. The purpose of this work focuses on the General Eloy Alfaro educational unit in the city of Salcedo, which faces significant cyber and physical threats due to its limited resources and the lack of defined security practices. The research began with the identification of critical assets and the analysis of the institutional network's current status. Subsequently, a network diagnosis was carried out using the Nessus vulnerability analysis tool. The results obtained were classified under the CIS Controls framework, and through a qualitative risk matrix, the educational unit's degree of exposure to threats was measured, laying the foundation for the remediation proposal. The diagnostic results revealed that the most significant risks were due to the lack of essential controls such as SMB signing. To mitigate these deficiencies, a selection of the CIS Controls was implemented, chosen and adapted according to the educational unit's infrastructure and resources. As a result, the cybersecurity maturity of the educational unit was increased, providing a replicable and sustainable model that promotes a proactive culture of risk management despite budgetary limitations.
  • Miniatura
    Item type:Ítem,
    Análisis de seguridad informática sobre el impacto de las vulnerabilidades en los servidores internos de Emapa
    (2025-07)
    Carrera Aguaguiña Andrés Steven
    ;
    Guevara Aulestia David Omar
    ;
    Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Tecnologías de la Información
    Currently, institutions rely heavily on technology, which also makes them vulnerable to cybersecurity threats. In the case of EMAPA, it is essential to safeguard its internal servers to prevent disruptions in operations and to ensure the security of sensitive information. For this reason, the objective of this project is to analyze the cybersecurity posture of these servers and identify potential vulnerabilities that could compromise their functionality. The research began with a thorough inventory of technological assets, providing a clear understanding of the current infrastructure and the critical services it supports. An applied and descriptive methodology was then employed, evaluating various vulnerability analysis tools namely Nessus, Nmap, and OpenVAS based on their accuracy, ease of use, and overall effectiveness. From this comparison, the most suitable tool was selected to carry out in-depth scans. The results revealed vulnerabilities categorized by severity levels, which helped assess the organization's exposure to potential threats. Based on these findings, tailored remediation measures were proposed according to EMAPA’s technical and operational capabilities. These recommendations aim to strengthen system security, prevent incidents, and improve the management of technological risks. Finally, the study highlights the importance of implementing regular cybersecurity controls on the organization's servers. The insights provided support informed technical and strategic decision-making in the protection of EMAPA's digital asset
  • Miniatura
    Item type:Ítem,
    Políticas de seguridad informática y vulnerabilidades en el sistema para generar citas y pagos de facturación del concesionario Ambacar
    (Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Sistemas Computacionales e Informáticos, 2022-03)
    Sánchez Paredes, Vanessa Michelle
    ;
    Chicaiza Castillo, Dennis
    The focus of this investigative work is the need to propose a plan to improve the computer security of the system to generate appointments and logistics, in order to later create and improve more robust and secure systems for the users of the AMBACAR dealership, since it is an entity that has been recognized in the automotive market and hopes to improve such software. The distribution of the research on the proposed plan to improve computer security is as follows: Chapter I, "Problems," describes the problems to be investigated and includes justifications and objective statements. Chapter II, "Theoretical framework", contains the background of the research that will support the research project and suggestions for solutions to the problems raised. Chapter III, "Methodology", describes the implementation of the project and demonstrates the use and preparation of the qualitative-quantitative research methodology. Chapter IV, "Proposal Formulation", uses the methods described in the previous chapter to detail each step to be followed in the research and development process. In addition, a document with the results obtained and a security improvement plan will be prepared. Chapter V, "Conclusions and Recommendations", presents the conclusions of the survey results and the detailed recommendations of a document with an enhanced IT security plan developed in the previous chapter.
  • Miniatura
    Item type:Ítem,
    Plataforma de seguridad perimetral para un ISP (proveedor de servicios de internet)
    (Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Maestría en Telecomunicaciones, 2021)
    Yacchirema Lumbi, Gladys Cristina
    ;
    Guevara Aulestia, David Omar
    Today computer security plays an important role in all sectors of society starting with government agencies, educational institutions, financial institutions, health centers and of course companies; the commitment and responsibility of each of them is to safeguard their data and information of people which leads to use platforms to efficiently manage the threats that try to breach the security of a network. This research project aims to implement a perimeter security platform for the company Simantec, due to the business line of the company and the flow of information it handles, a perimeter security system covers the needs and requirements demanded by this entity, being the highest priority the protection of all data considered the most important asset of the entity. The implementation of a proprietary UTM (Unified Threat Manager) at the boundary of the Internet and LAN will mitigate the threats to which the data is exposed, functions such as antivirus, anti-spyware, anti-spam, network firewall, intrusion prevention and detection, and content filtering will maximize the security of the information. In addition, the creation of VPN to access the internal network from anywhere and access the company's services will increase security. At the same time, another defense equipment will be configured, a software UTM with the same functions of the proprietary UTM. The objective is to compare the two threat managers, analyze the advantages and disadvantages of each one in order to choose the best option considering cost/benefit, features, performance, security and above all profitability. Finally, we propose the development of a plan of good security practices, with the aim that employees incorporate as a habit certain methods to prevent attacks carried out through malicious activities by third persons.
  • Miniatura
    Item type:Ítem,
    Plan de gestión de seguridad informática basado en la Norma ISO 27001 para el Departamento de Tecnología de la Información en la Empresa Plasticaucho Industrial S.A.
    (Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Sistemas Computacionales e Informáticos, 2020-01)
    Tigse Moposita, Jorge Luis
    ;
    Mayorga Mayorga, Franklin Oswaldo
    La empresa “Plasticaucho Industrial S.A.” dedicada a la producción de calzado en varias líneas como: casual, escolar, deportivo, industrial, entre otras, tiene su matriz en la ciudad de Ambato, se encuentra en constante crecimiento tanto a nivel del Ecuador como a nivel internacional en Colombia y Perú, de esta manera requiere contar con personal ampliamente capacitado y recursos que permitan ofrecer productos de calidad de manera eficiente y segura. La tecnología se encuentra en constante desarrollo por lo que es importante mantener actualizado los procesos de seguridad dentro de la empresa, verificando y corrigiendo errores que puedan poner en peligro la información relevante de la entidad, por lo cual existe la necesidad de adaptarse a un modelo de gestión de la información de acuerdo a Normas Internacionales que permitan el control y manejo de datos con total integridad. Plasticaucho Industrial S.A. cuenta con POLÍTICAS DE GESTIÓN DE LA INFORMACIÓN, pero las mismas deben ser analizadas para su control y si se da cumplimiento por parte de los usuarios, además determinar una metodología que pueda ser adaptado a la Norma Internacional ISO 27001 para gestionar la seguridad de los datos, de esta manera obtener una Certificación Internacional para la empresa que le dará más fortaleza y seguridad ante sus competencias. El diseño de un Plan de Gestión de Seguridad Informática basado en la Norma ISO 27001 que se plantea en el presente proyecto permitirá analizar las fortalezas, debilidades y determinar un plan de acción ante un problema que pueda tener a futuro la empresa en la cual puede quedar expuesta la integridad de sus datos. ABSTRACTThe company "Plasticaucho Industrial SA" faces the production of footwear in several lines such as: casual, school, sports, industrial, among others, has its headquarters in the city of Ambato, is constantly growing both at the level of Ecuador and at an international level in Colombia and Peru, this way requires trained personnel and resources that can offer quality products efficiently and safely.The technology is in constant development, so it is important to keep the security processes within the company updated, verifying and correcting errors that may jeopardize the relevant information of the entity, so there is a need to need a model of Information management according to International Standards that control the control and management of data with complete integrity.Plasticaucho Industrial SA has information management policies, but they must be analyzed for control and if it is complied with by users, it will also determine a methodology that can be adapted to the International Standard ISO 27001 to manage security of the data, in this way obtain an International Certification for the company that will receive more strength and security before their competences.The design of a Computer Security Management Plan based on the ISO 27001 Standard that is presented in this project that analyzes the strengths, weaknesses and determine an action plan fora problem that the company may have a future in which it can remain Exposed the integrity of your data.
  • Miniatura
    Item type:Ítem,
    Plan de seguridad informática basado en la norma iso 27001, para proteger la información y activos de la empresa privada Megaprofer S.A.
    (Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Sistemas Computacionales e Informáticos, 2020-01)
    Torres Chango, Christian Damian
    ;
    Chicaiza Castillo, Dennis Vinicio
    En la actualidad, es muy importante considerar que la información es una prioridad para cualquier institución u organización. Dentro de estas entidades, la información conjuntamente con los sistemas informáticos y procesos, forman activos muy importantes. La confidencialidad, disponibilidad e integridad de la información deben ser garantizadas, para mantener niveles de conformidad, competitividad e imagen empresarial. Conforme avanza las TECNOLOGÍAS DE LA INFORMACIÓN (TI), existe un incremento de incidentes informáticos siendo que los activos de información cada vez están más expuestos a niveles de amenazas elevadas. Estos incidentes se aprovechan de las vulnerabilidades existentes en los activos de información, afectando no solo a los procesos, si no a la continuidad operativa del negocio. En el presente proyecto de investigación, el principal objetivo es la implementación de un modelo estructurado de carácter preventivo Sistema de Gestión de Seguridad de la Información (SGSI), basado en la norma ISO 27001:2013, para la realización de un plan de seguridad informática en la empresa privada Megaprofer S.A. La importancia radica en la información que maneja la empresa, entre ellos las políticas de seguridad, sistemas de control de acceso, administración de activos, seguridad de los recursos humanos, entre otros. A partir de esto, se proponen nuevas políticas de seguridad coherentes y enmarcadas dentro de los límites de cumplimiento institucional, para el establecimiento, implantación, mantenimiento y mejora que ofrece un SGSI, mediante un proceso de mejora continua. ABSTRACTAt present, it is very important to consider that information is a priority for any institution or organization. Within these entities, the information together with the computer systems and processes, form very important assets. The confidentiality, availability and integrity of the information must be guaranteed, to maintain levels of conformity, competitiveness and business image.As Information Technology (IT) progresses, there is an increase in computer incidents, and information assets are increasingly exposed to high threat levels. These incidents take advantage of existing vulnerabilities in information assets, affecting not only the processes, but also the operational continuity of the business.In the present research project, the main objective is the implementation of a structured preventive structured model Information Security Management System (ISMS), based on ISO 27001: 2013, for the realization of a computer security plan in the private company Megaprofer SA The importance lies in the information handled by the company, including security policies, access control systems, asset management, human resources security, among others.From this, new coherent security policies are proposed and framed within the limits of institutional compliance, for the establishment, implementation, maintenance and improvement offered by an ISMS, through aprocess of continuous improvement.
  • Miniatura
    Item type:Ítem,
    Auditoria informática aplicando la metodología Cobit 5.0 al proceso de recaudación del módulo de tesorería del sistema cabildo en el Departamento Financiero del Gobierno Autónomo Descentralizado Municipalidad de Ambato
    (Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Sistemas Computacionales e Informáticos, 2020-01)
    Ruíz López, Carlos Andrés
    ;
    Chicaiza Castillo, Dennis Vinicio
    El presente trabajo de investigación se realizó con el fin de auditar al sistema Cabildo del Gobierno Autónomo Descentralizado Municipal de Ambato, al cual no se ha realizado una auditoria informática en años anteriores, el beneficio de dicha auditoria es encontrar posibles inconvenientes en el departamento de Tecnologías de la Información (TI), dicho sistema es el encargado de la recaudación de bienes financieros en la ciudad de Ambato. Con lo cual se espera aportar con nuevas ideas que proporcionen un mejor servicio a los interesados de la ciudad de Ambato. La metodología empleada fue Cobit 5.0 la cual se utilizó para poder evaluar y encontrar las falencias en el sistema Cabildo y en las áreas con las que trabaja dicho sistema, el trabajo principalmente se basó en los cinco principios de dicha metodología, los cuales ayudaran a mantener un manejo óptimo de la información. Se realizaron pruebas las cuales fueron dividas por áreas, después dichas pruebas fueron separadas por principios dependiendo las características que cumplan. De acuerdo con el análisis obtenido mediante las pruebas generadas se pudo presenciar las debilidades del sistema Cabildo. Una de las debilidades más visibles fue la carencia de documentación del sistema, la cual es de vital importancia en la institución, por lo cual se presentaron recomendaciones las cuales ayudarán a mantener la integridad de la información. Para el Gobierno Autónomo Descentralizado Municipal de Ambato la elaboración de una auditoria informática basada en la metodología Cobit será de gran ayuda ya que se podrá comprobar los procesos y documentación existentes que son manejado en el departamento de Tecnologías de la Información (TI). ABSTRACTHe present research work was carried out in order to audit the Cabildo system of the Government of Ambato, which a computer audit has not been carried out in previous years, the benefit of this audit is to find the possible inconveniences in the Information Technology department (IT), also the system is responsible for the collection of financial assets in the city. That is expected with new ideas that provide a better service to those interested in Ambato.The methodology used was Cobit, it was used to be able to evaluate and find the flaws in the Cabildo system and in the areas with which the system works, the labor was mainly based on the five principles of said methodology, which will help to maintain a management; Optimal information. Tests were performed, they were divided by areas, then tests were separated by principles depending on the characteristics they meet.According to the analysis obtained through the tests generated, the weaknesses of the Cabildo system could be seen. One of the most visible weaknesses was the lack of documentation of the system, recommendations were presented which will help maintain the integrity of the information.For the Autonomous Municipal Decentralized Government of Ambato the elaboration of a computer audit based on the Cobit methodology will be of great help since it will be possible to check the existingprocesses and documentation that are managed in the Information Technology (IT) department.