Browsing by Author "Sánchez Zumba, Andrea Patricia"

Now showing 1 - 11 of 11

Aplicación del proceso threat hunting para la detección de vulnerabilidades y contramedidas en la infraestructura de red del Cuerpo de Bomberos de Ambato.
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Tecnologías de la Información, 2023-09) Avilés Vasco, Bryan Jardiel; Sánchez Zumba, Andrea Patricia
The security of the network infrastructure of Ambato Fire Department takes on a vital role, as it houses sensitive and strategic data for the functioning of its operations. Given the constant increase in cyberattacks and the ongoing evolution of tactics employed by malicious actors, it is essential to have an effective strategy that enables the identification and mitigation of threats in real time. In this context, this work proposes the development of a comprehensive manual to implement the Threat Hunting process in the network of Ambato Fire Department. Utilizing a variety of specialized cybersecurity tools such as Wireshark, Nessus, and Advanced IP Scanner. Additionally, a manual analysis of log files was conducted, delving into the understanding of their handling and their relevance in the realm of cybersecurity. As a complement, a Python code was developed to enhance the analysis, with the purpose of identifying and addressing vulnerabilities that could jeopardize the solidity of the network infrastructure. This approach not only allowed for the detection of security weaknesses but also paved the way for the planning of various countermeasures aimed at strengthening the identified susceptible points in the network. Finally, the process was documented to ensure the traceability and replicability of the undertaken actions.
Evaluación de riesgos para un sistema de gestión de seguridad de la información en base a la Norma ISO/IEC 27001 aplicado a un proveedor de servicios de internet
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Telecomunicaciones, 2023-09) Hidalgo Martinez, William David; Sánchez Zumba, Andrea Patricia
Cybercrime is a constant threat to individuals and organizations worldwide, as it utilizes exposed techniques to steal confidential information, damage systems, and cause significant financial and reputational harm. The importance of cybersecurity is evident in the wake of the COVID-19 pandemic, as cybercriminals seek new ways to exploit vulnerabilities in systems and networks. One of the primary concerns is protecting sensitive data of companies and users. In today's digital age, it is crucial to safeguard against cyber threats and attacks, secure information, and ensure the integrity of systems and critical infrastructure. In the case of an ISP, Risk Assessment is important due to the critical nature of the data they handle. Risks may include unauthorized access to user information, data loss, online fraud, and damage to the organization's reputation. This assessment is comprehensive, considering factors such as confidentiality, integrity, and availability of information, as well as risks associated with processes and technology used based on the ISO/IEC 27001 standard. Since an ISP manages large amounts of customer and user data, it provides a framework for the establishment, implementation, maintenance, and continuous improvement against threats, vulnerability assessment, and the likelihood of occurrence for each risk, along with mitigation measures. Through Open Source technology, information assets are identified, and the evaluation of threats and vulnerabilities to which they are exposed is conducted. Additionally, the potential impact of a threat on the company is determined. With this information, appropriate information security measures are implemented to mitigate the identified risks.
Evaluación de seguridad del sistema de video vigilancia de la empresa ECUASEG
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Electrónica y Comunicaciones, 2022-09) Velasteguí Vásquez, Edwin Aníbal; Sánchez Zumba, Andrea Patricia
Connectivity in recent years has increased, causing almost all devices such as cameras, alarms, electric intercoms are connected to the internet for user manipulation, viewing and control, Despite the great benefits that connectivity provides, it leaves gaps that cybercriminals take advantage of to steal information and compromise equipment. That is why, this project is focused on performing an analysis of the video surveillance system of the company ECUASEG in order to determine the vulnerabilities of the system through the tools provided by ethical hacking, in order to define guiding procedures to anticipate possible attacks on the Company. Where the research focused on the detection of vulnerabilities, threats and risks of the video surveillance system in the company ECUASEG, through 6 phases: recognition, exploration, gaining access, maintaining access, keep hidden and report to evaluate the security of the video surveillance system where the importance of cybersecurity in systems, technological infrastructure, etc.
Honeynet para análisis, evaluación y tratamiento de riesgos cibernéticos en un sistema iot
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Telecomunicaciones, 2024-08) Acosta Proaño, Yulisa Francisca; Sánchez Zumba, Andrea Patricia
The security of home IoT systems is critical for protecting sensitive data and ensuring the integrity, availability, and confidentiality of information and devices. Nessus was utilized to analyze the vulnerabilities of the most common smart devices on the market. Based on these findings, a Honeynet was designed to expose these vulnerabilities and illustrate potential attacks on home IoT devices. Penetration tests were conducted to assess the security of devices within the home IoT system, as well as tests through the Honeynet, which included WiFi network hacking and control of IoT devices from the LAN. The honeypots deployed in the project are ConPot and CitrixHoneypot, which logged exploits of vulnerabilities CVE-2013-2566 and CVE-2015-2808. Additionally, a custom honeypot in Python was created to capture TCP SYN Flooding DoS attacks on port 6668/TCP utilizing the IRC service. The results of these tests were crucial in developing a risk treatment plan, based on a baseline model for data security, privacy of individuals, and IoT devices in home environments. A GAP analysis was conducted to determine the current state of the system. The risk treatment plan proposes specific controls and policies to mitigate identified risks and enhance the security of the IoT system, ensuring continuous and robust protection for IoT devices in smart homes.
Plataforma OTT para el proveedor de servicio de internet “Clicknet S.A.” en el casco central de la ciudad de Patate.
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Electrónica y Comunicaciones, 2023-09) Revelo Andrade, Christian Andrés; Sánchez Zumba, Andrea Patricia
The research project focuses on the design of an OTT platform for the internet service provider "Clicknet S.A." in the center of the city of Patate, expanding the services that the company offers to its customers. This platform provides adaptive video streaming content through free software over the Internet, allowing the development of content broadcasting through visual media. The OTT platform has become a popular and attractive method for attracting attention to the needs of users seeking entertainment, since it offers a wide variety of multimedia content, which generates a connection between the user and the service, providing a compatible and portable environment for any device. The realization of the project is based on the study, development and analysis of parameters that characterize the design of the OTT platform, considered as a method of strategy in improving the business model of the internet service provider Clicknet S.A. Allowing to be offered as an additional and free service by the provider, favoring the increase of profitability of the company's customers, and harboring preference over other internet service providers.
Sistema automatizado de control y monitoreo basado en tecnología Lorawan y MQTT para el cultivo de hortalizas bajo invernadero
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Electrónica y Comunicaciones, 2023-03) Pérez Reyes, Freddy Josué; Sánchez Zumba, Andrea Patricia
The continuous progress of technology and the application of the Internet of Things (IoT) in the agricultural sector has allowed an advance in the systems that favor the development of crops. This project develops a control and monitoring system for the cultivation of vegetables under greenhouse in the Huachi Grande parish of Ambato. The objective is to provide the grower with an autonomous system capable of making intelligent decisions without the need for constant supervision by a person. The system allows monitoring and control of temperature and humidity, as well as pH levels and the amount of radiation that the plants receive during the day, and also has an artificial lighting system. The purpose of this research work is to provide a favorable environment for cultivation inside a greenhouse, for this we work with temperature and humidity sensors, soil moisture sensors, pH sensor and solar radiation sensor. In order to control the temperature inside the greenhouse, two fans and an automatic curtain closing and opening system by means of a low-speed electric motor are used, as well as soil humidity control, which is carried out by means of drip irrigation. On the other hand, for pH monitoring, a sensor is used for the water that enters the crop through the irrigation hoses. Finally, a solar radiation sensor is used to monitor the amount of radiation received by the plants, in order to activate artificial lighting, if necessary, with the objective of increasing the period of time during which the plant performs photosynthesis. The technology used is based on LoRaWAN and the MQTT protocol. The system has two Lora nodes and a gateway to communicate with the server and connect the system to the Internet. To control the system, an HMI based on Node-RED is used, which allows constant real-time monitoring, automatic or manual control of the system and visualization of daily statistics. In addition, the system has a control and monitoring through the Telegram application, through which the producer receives alert notifications and can control the system manually.
Sistema de control y monitorización agroindustrial 4.0 aplicado a cultivos verticales.
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Electrónica y Comunicaciones, 2023-02) Villacís Zamora, Guillermo Fabián; Sánchez Zumba, Andrea Patricia
The current research project proposes the implementation of a Control and Monitoring System applied to efficient vertical agriculture or Agroindustry 4.0 for the benefit of farmers and producers, contributing to the consumers of the cultivated product, due to the fact that the agronomic process requires factors such as green areas, processing, climatic conditions, hydration, financing etc. Based on these factors and research in this field, a useful system has been developed in agriculture, which ensures the quality of production, the designed system consists of an aesthetic and ecological structure, which takes advantage of small spaces, is sustainable and economical, efficiently saves every resource used and offers a different method to the agro-industrial process. The project is carried out through a vertical irrigation system and focused on a test crop for lettuce, which allows the application of three stages or phases such as aeroponic or agro-industrial 4.0 technology. For the control process in the irrigation and fertilization stage, use is made of programmable logic controllers, as well as sensorization for the control of humidity, PH and temperature, the communication of the system is done through a Gateway by means of a messaging protocol, as well as the design of a database with the use of storage platforms, and monitoring the state of the crops through a mobile application. This system offers support in the field of agribusiness, in the processes of cultivation of healthy products for the final consumer, in addition to promoting greater productivity for both the farmer and producers, offers a different and innovative method in agriculture, reducing pollution, reducing spaces of arable land, also increases the consumption of high quality products, and takes advantage of water resources, also provides farmers with greater control over their plantations, which ensures the quality of production quickly and effectively.
Sistema de evaluación inteligente de terceros molares basado en aprendizaje automático y procesamiento de imágenes.
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Telecomunicaciones, 2024-08) Sánchez Villa, Juan Manuel; Sánchez Zumba, Andrea Patricia
project explores the anatomical characteristics of third molars and applies advanced techniques in automated learning and image processing for their evaluation. The Pell and Gregory, and Winter classifications were used to structure a database of 2592 instances into 12 main categories, enabling precise model training using the YOLO algorithm in its YOLOv8x version. The selection of appropriate tools and software was pivotal for the successful development of the artificial intelligence model; Google Colab was chosen for training due to its high processing speed, achieving optimal training within 45 to 55 epochs for each category of third molars. Additionally, an interface for third molar evaluation was developed using CustomTkinter, leveraging YOLOv8's extensive compatibility with Python libraries compared to earlier versions and other available artificial vision algorithms. This facilitated the creation of an interactive and user-friendly platform for dental professionals. For clinical data management and storage, Firebase Admin was implemented, enabling the collection and organization of results from each clinical case. This led to the development of a comprehensive dental clinical template containing essential parameters necessary for subsequent reviews by dentists. Overall, this advanced system enhances accuracy in diagnosing and evaluating third molars, optimizing dental practices through effective integration of artificial intelligence technologies and development tools, providing an efficient and precise approach to managing clinical data.
Sistema de monitoreo de variables de macro medición para la gestión del recurso hídrico y el control de calidad de la EP-EMASA-PM,
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Electrónica y Comunicaciones, 2022-09) Cacuango Labre, Richard Stalyn; Sánchez Zumba, Andrea Patricia
The research project aims to provide a system that facilitates the monitoring of macro measurement variables, for the management of water resources and water quality control automatically, allowing the results to be Viewed through web and mobile devices. Taking as reference the levels of turbidity, pH, chlorine and temperature, as the main variables in the control of water quality, while the acquisition of the level of flow and consumption are used for the management of water resources. Once these values are acquired, they are compared with the INEN 1108: 2014 standard at the national level and with the water quality guide provided by the WHO at the international level. The acquisition of the sampling data in the five drinking water container tanks is carried out twice a day, during the work day of the personnel in charge of the Public Company of Drinking Water, Sewage and Sanitation of the Pedro canton Moncayo, allowing rapid action to be taken when control of any variable that presents levels that are inadequate for human consumption is required. The monitoring system is developed around the Heltec wireless stick lite Microcontroller with free software, which allows lowering the manufacturing costs of the system. This microcontroller is responsible for receiving the variables obtained by the sensors, in order to send the information through a Gateway to the The things stack Enterprise server, using the LORA network. The information is later sent to the Node Red server where the information is managed to finally be stored in the MySQL database. This server also allows the display of information, through a dashboard, located on the localhost of the server. To provide greater access security, the record of the personnel in charge of monitoring is previously generated, based on an email and a password, which are stored in the MySQL database. To verify its functionality, tests are carried out over a period of one month with continuous data collection every 30 min, in addition to providing greater reliability, in case of power failures, an energy backup built on the basis of solar panels is incorporated, allowing store energy in Li ion batteries which allow the autonomous operation of the system in a period of 24 hours.
Sistema de telemedicina para monitorear los niveles de Glucosa en pacientes con Diabetes
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Carrera de Ingeniería en Electrónica y Comunicaciones, 2014-11) Sánchez Zumba, Andrea Patricia; Pallo Noroña, Juan Pablo
La necesidad de un monitoreo constante a pacientes que sufren de diabetes, constituye el punto de partida para el desarrollo de esta investigación. Pues éstos pacientes comúnmente están propensos a la automedicación, porque no cuentan con supervisión permanente y especializada de su enfermedad. Planteándose una solución a este problema mediante el empleo de Tecnologías de la Información y Comunicación, dentro de las cuales se mencionan las Comunicaciones Inalámbricas y las Móviles. Se propone diseñar e implementar un Sistema de Telemedicina para Monitorear los niveles de Glucosa en pacientes con Diabetes, que permita el envío inmediato de cada medición que realice el paciente, usando un dispositivo electrónico “Arduino UNO” que facilita la conexión con su glucómetro, y utilizando un módem GSM/GPRS que establece conexión con la red de telefonía móvil. A través de la red de telefonía móvil y del módem GSM/GPRS se enviarán mensajes de texto con el valor de glucosa y la fecha de medición, con la finalidad de que estas mediciones puedan ser supervisadas y controladas inmediatamente por el doctor, desde una interfaz que le permite al galeno monitorear a sus pacientes. Esta interfaz es la encargada de extraer información de los mensajes de texto recibidos en el módem GSM/GPRS, y vincularla con la base de datos. En casos especiales, el sistema por sí mismo le notificará al paciente por medio de un mensaje de texto que debe acercarse a consulta médica porque sus niveles de glucosa están fuera de lo establecido.
Sistema inteligente para la rehabilitación de extremidades superiores mediante sensores electromiográficos
(Universidad Técnica de Ambato. Facultad de Ingeniería en Sistemas, Electrónica e Industrial. Maestría en Automatización y Sistemas de Control, 2018) Sánchez Zumba, Andrea Patricia; Altamirano Meléndez, Santiago Mauricio
Una propuesta para la rehabilitación de personas con extremidades superiores afectadas por accidentes cerebrales es presentada en este trabajo investigativo. El desarrollo de una red neuronal para detectar gestos generados por las manos del usuario es programada haciendo uso de un dispositivo comercial que procesa señales electromiográficas, el cual adicionalmente provee sensores inerciales que facilitan el reconocimiento de los movimientos de la extremidad afectada. Todo el procesamiento de señales es llevado a cabo en un software matemático, el cual facilita la implementación del sistema inteligente de reconocimiento, permitiendo adicionalmente transmitir la información procesada a una base de datos. A su vez, la base de datos sirve como puente de comunicación entre el software matemático y el motor de videojuegos, mostrándose como una opción robusta para la intercomunicación de información entre programas. La creación de escenarios virtuales que pueden ser modificados por la generación de gestos es propuesta como una alternativa motivacional, donde tareas como conducir un vehículo, mover objetos y activar controladores pueden ayudar a recobrar el movimiento natural de las extremidades a una persona con motricidad limitada. Los escenarios están diseñados sobre el motor de videojuegos Unity, dadas las facilidades y estructuración de programación que este tipo de software presenta. Resultados de la aplicación sobre usuarios con y sin problemas de motricidad de manos es presentada para validar la usabilidad de la aplicación, aclarando que la aplicación es propuesta como solución, más no se detallan resultados de largo plazo dado el periodo de tiempo asignado para la investigación presentada.