Análisis de vulnerabilidades en dispositivos intermediarios aplicando pruebas de Pentesting en la red administrativa de la empresa pública Empresa Municipal Mercado Mayorista de la ciudad de Ambato

Abstract

Information technologies encompass aspects such as infrastructure, data, security, development, support, and maintenance, all of which are essential for any type of organization or enterprise. Security, as a fundamental component of information technologies, ensures the confidentiality, integrity, and availability of data (CIA). Protection mechanisms depend on prior planning and their implementation within an organization. The search for vulnerabilities in network devices within the company was carried out using analysis and monitoring tools, preferably Open Source. Additionally, Pentesting of these assets allowed the verification of the company's cybersecurity level. The application of Pentesting methodologies and information security verification ensured a comprehensive collection of information regarding the organization’s cybersecurity posture. The information gathered and analyzed resulted in specific recommendations for each security gap identified during the practical application. These findings are compiled in a technical report that details the security vulnerabilities, recommendations, and a theoretical evaluation of the company's information security. This research establishes a solid foundation and support for the technology department, enabling informed decision-making, the proposal of solutions, and the establishment of parameters that contribute to strengthening the company’s information security.