Creación de un plan de contingencia que disminuya los ataques a web sites mediante la detección de anomalías

Abstract

Currently, most web sites choose to improve their security by seeing everything that can happen if the proper controls are not in place, an unsafe website generates a very bad reputation for whoever has made it and in turn generates distrust for other users. that they are going to use it. Reason for which you can become a victim of theft of information hosted on them. With the theft of information, many problems can arise both for the company that manages the affected website and for the end user. The latter is affected in a certain way given that they can become the victim of a computer crime, giving rise to a possible case of extortion or some other serious problem of this calamity. Many times, due to ignorance, they try to quickly correct errors without taking into account that the solution being applied may not be the correct one, leading to aggravate the existing problem, creating gaps that are difficult to detect and correct in time in many of the case. This can lead to a large-scale negative effect if this is not controlled in time. Just as there is information theft, there are other ways to harm a web service, where they can refuse to give access to them, that is, by finding security gaps they manage to infiltrate to cause a partial or total denial. of an action with different modes and tools. Put another way, denial of service results in a lack of availability of a given resource, for example access to email, connectivity, or some other service. In more extreme cases, millions of people could be temporarily forced to stop using the resource that is being seized by the originators of the attack. In other cases, criminals also use this method to damage programs and files on computer systems. Given the growing technological development, people who engage in computer criminal acts choose to improve their methods of violating their objectives, creating novel methodologies or scripts that allow them to achieve their goal, which is to cause harm to their victims in most cases. Taking this into account, the ways to protect the stored information and everything that can be affected by these people and their most recent methods, is also to develop new ways to be able to avoid or prevent possible thefts, attacks, theft in the future, loss of information and denial of the service used. Trying to make an application that is 100% free of bugs and vulnerabilities is not going to be possible, but it is possible to plan mitigation measures that allow quick actions to be taken in order not to affect the service to the user. That is why it is proposed to analyze the possible failures and vulnerabilities that can arise when browsing a website normally, this is done with the aim of collecting evidence that allows obtaining results that help form a contingency plan in case that the web site or server used is the victim of a hack.