DESARROLLO DE UN MECANISMO ÁGIL DE AUDITORÍA A LA SEGURIDAD INFORMÁTICA DE LA RED INALÁMBRICA 802.11 CON ARQUITECTURA AAA; CASO DE ESTUDIO: INSTITUTO ITSJOL

Abstract

Wireless computing facilitates mobility and increases productivity in organizations; however, in almost the same proportion, they increase the risk that those organizations will become victims of an attack on computer security. In this article, we propose an agile mechanism to audit the security of the wireless network based on AAA architecture, whose objective is to evaluate the effectiveness of the implemented controls. For the construction of the proposed mechanism, the ISO 27002 standard was analyzed together with the OSSTMM methodology and the best security practices in wireless networks, and to test its usefulness, the resulting model was applied in the execution of an agile security audit, which provided elements of judgment to determine the deficiencies and the maturity level of the security controls, as well as the necessary corrective measures. Once the results were analyzed, it was concluded that the mechanism works, that it is really agile, that provides a clear and measurable diagnosis of the level of maturity of the controls in safety, and guidelines for making new projects and improvements