Implantación de un aplicativo para optimizar la gestión centralizada de logs en un ambiente honeynet en el datacenter UNACH”

This research project deals with the deployment of an application for the centralization of information, at the Universidad Nacional de Chimborazo, under the technology known as honeynet, a tool that simulates vulnerable services and applications, called honeypots and thus attract attackers, with the aim of capturing information from their activities on the network. The honeynet, in its configuration has control and capture modules that facilitate the analysis of data related to possible access attempts and malicious activities carried out within them. The analysis of the captured information will be used to determine connection patterns that will allow later developments, identify attacks, identify vulnerable services or susceptible to attacks, etc. The research was made in a simulated environment in which the honeynet was implanted, as well as the honeypot and as a Walleye centralization application, which is a web interface based on GUI, responsible for storing all information, running a web server to which it communicates remotely through an SSL connection, this interface will see all the information received and centralized honeynet. According to the results obtained, the time was optimized at the moment of reading the data in a single interface, the use of procreator and memory was reduced when analyzing all the data in a single computer in a centralized way, in addition, the management time of the tools incorporated in the honeynet was reduced.

• Главный автор: Bryam Fabricio, Yucta Silva (author)
• Формат: bachelorThesis
• Язык: spa
• Опубликовано: 2019
• Предметы: Optimizar; honeypot; honeywall
• Online-ссылка: http://dspace.unach.edu.ec/handle/51000/6122