Identificación y escenarios de solución de vulnerabilidades en la página web del colegio de bachillerato Alejandro Aguilar Lozano usando la herramienta OWASP-ZAP

Abstract

Abstract: Vulnerability scanning is an essential process to prevent possible attacks or vulnerabilities in a web application. The educational environment is not exempt. In this work a scan was performed using various open source and paid tools to detect in real time the vulnerabilities to which the educational web application is exposed. Vulnerability scanning parameters were established to identify and classify the types of vulnerabilities that currently exist, establishing the following parameters: risk level, existence status, instance number and external reference. OWASP ZAP was one of the tools used for vulnerability scanning, which provided information on numerous existing vulnerabilities in the application, which could expose data. Solution scenarios were presented, so that those responsible for the IT area of the institution can address them in a timely manner. In this study, the method of identification and analysis of the most frequent vulnerabilities in the educational environment was used. Therefore, it is crucial to implement solution scenarios to minimize the identified risks.