Hackeo ético para un proveedor de servicios de internet y propuestas de mejoras

Abstract

This research project focuses on ethical hacking applied to an Internet service provider, addressing its theoretical relevance in the context of cybersecurity and data protection. The problem to be solved lies in the vulnerability of computer systems to possible cyberattacks, particularly in the Latin American and Ecuadorian context, where there is low cybersecurity awareness, lack of regulatory standards, and use of obsolete software. The general objective is to ethically hack an Internet service provider using the white box approach to locate vulnerabilities and propose improvements. The OSSTMM methodology employs a systematic process that includes defining protected assets, understanding the interaction zone, determining the scope, and evaluating through different channels and specific modules. Using tools that allow scanning and consequently exploiting vulnerabilities found, existing vulnerabilities in the network of services provided by the ISP were found. This was done by carrying out the hacking using the white box approach. Once the vulnerabilities were identified, improvements were proposed that would help improve the security of the service. These results will have a significant impact in the field of cybersecurity because they will allow the institution to provide security for customer information, also establishing a methodological precedent for future security assessments in Internet service providers in the region.