ANÁLISIS DE UN MECANISMO DE SEGURIDAD INFORMÁTICA MEDIANTE EL MANUAL DE LA METODOLOGÍA ABIERTA DE TESTEO DE SEGURIDAD. CASO DE ESTUDIO : INSTITUCIÓN PÚBLICA DEL ECUADOR

Abstract

Among the technological securities that every organization must make in its infrastructure that manages the information technologies, are the data networks. This research analyzes and evaluates these vulnerabilities in three public institutions to know the robustness of the mechanism of the securities implemented in these organizations. The collection of the information is carried out applying two stages of ethical hacking that are recognition and exploration. Applying the guidelines of the Open Source Security Testing Methodology Manual (OSSTMM) focused on the data networks, in order to calculate the Risk Assessment Values RAVs using the calculator provided by Institute for Security and Open Methodologies (ISECOM). The values obtained from the evaluation in the three institutions were 69.3881 RAVs, 67.9729 RAVs and 60.3295 RAVs, which correspond to the actual safety of Institution A, B and C respectively; After applying security management strategies, the new security level values are 77,6363 RAVs, 75,2535 RAVs and 71,9043 RAVs, thereby guaranteeing the confidentiality, integrity and availability of the information.