Diseño de arquitectura de seguridad perimetral de red mediante el uso de herramientas de detección de intrusos, firewall y honeypot

Abstract

Currently, digital information is considered an important resource within any organization, so it must be treated and cared for in a cautious way due to the constant evolution of various threats that have been increasing, such as, for example: theft or loss of information , computer viruses, denial of services and identity theft. Professionals specialized in the IT area recommend prioritizing information security in every system. During the last decade, perimeter security has been a fundamental element for the design of networks because it provides various alternatives to identify, resist, isolate and block malicious attacks, as well as allowing the correct distribution of the network, authorizing or restricting access only to permitted users. To carry out this work, a preliminary investigation was carried out based on updated concepts to strengthen the theoretical foundation, which helped to choose the appropriate security components to safeguard the network perimeter. In this degree work, the design of a perimeter security architecture that includes security tools is proposed in order to guarantee that the information of an organization is not vulnerable to the various types of attacks, for this an architecture was designed that manages to protect the entire perimeter of the proposed network design. The design consists of an intrusion detection system with local rules established to issue alerts in real time in the event of unauthorized actions on the network, as well as a honeypot that attracts and detects intrusions made by a host and creates a log based on information from the attacker, as well as a demilitarized zone that is an area that separates the Apache Web server and a firewall that acts as an intermediary in the network to control traffic within it through established rules and configurations