Sistema de gestión unificada de amenzas (UTM) en la Fundación Para El Desarrollo Integral Espoir

Abstract

According to statistics, the growing increase in online services that many companies implement to improve their services also constitutes a growing level of risk and vulnerability to themselves. Every company could be a victim of a computer attack, whether large, medium or small, which implies a vulnerability in the security of its data and risks to the business. Nowadays, people in charge of the security and infrastructure of a company have to deal with countless computer threats, making this a very exciting and complicated issue. That is why arises the importance of implementation of a preventive security plan that protects companies from possible attacks on their computer network. There are many kinds of attacks on computer systems, such as DoS Attacks, Ransomware, Social Engineering, Phishing, among others. They try to take the advantage of weaknesses in a company's computer network attacking different points, and even taking advantage of staff oversights to infiltrate the network and compromise the security of the company. This project envisages a technological solution in the "Foundation for Integral Development ESPOIR", which allows the administration of a Unified UTM Threat Management System. The initial conditions of the company were evaluated working with the infrastructure staf. A set of Pentesting tests was developed, which facilitated the characterization of the vulnerabilities existing in the different services and systems of the institution. As result of these tests, were established a set of security strategies to prevent potential attacks that could compromise the information of the institution and its customers.