Análisis y diseño de una propuesta para mitigar ataques cibernéticos a correos electrónicos utilizando técnicas de hacking ético.

Abstract

Attacks on emails have been evolving over the years, these attacks have become more frequent and have caused harm to ordinary people and companies with the theft of the most important asset that is information, in this way, solutions have been developed as much of software as of training to avoid that these attacks fulfill their objective. Based on real cases of attacks by email, it is analyzed all the processes that the attacker has to take to reach his goal, as well as the solutions offered by the companies, hoping not facing similar cases. Through Ethical Hacking, spoofing attacks, phishing, mailing and hybrid emails are carried out with all the attacks, in this way through virtual machines (instances) of Amazon Web Services it is possible to attack real emails of 200 people, to achieve a statistic through parameters and in this way, to know which people are more vulnerable and what information was granted to the attacker. To do so, a technical and training solution is proposed in a way that ordinary people or the ones into the company, won´t be the next victims of attacks that are aimed to stealing personal or financial information and damaging the organization.