Auditoría de la seguridad informática siguiendo la metodología Open Source Security Testing Methodology Manual (OSSTMM) para la Empresa MEGAPROFER S.A.

Abstract

ABSTRACT The research project developed below aims to carry out a Computer Security Audit following the methodology Open Source Security Testing Methodology Manual (OSSTMM) for the company Megaprofer S.A. in order to determine possible failures or vulnerabilities that they may have the infrastructure of network and the subsequent exploitation of weaknesses by using the appropriate computer tools. With this audit it is possible to determine the risks that the company has in relation to the network and computer assets, the level of access that an external person or agent could have within the company when trying to produce some type of damage in the services or technological equipments and in turn when trying to subtract sensitive data; taked of the base on the results achieved, in order to propose appropriate measures and recommendations that can guarantee the integrity, confidentiality and availability of the information, as well as possible solutions to mitigate the inconvenient encountered. To reach the purpose set out in the topic, the Open Source Security Testing Methodology Manual (OSSTMM), the methodology allows us to carry out a planning and subsequent verification in a precise way about security with the that is counted at the operational level based on the tests carried out in relation to human, physical, wireless, telecommunication, and data network factors.