Implementación de un sistema de seguridad para reducir ataques de phishing en una organización

Abstract

Abstract:This degree work is aimed at implementing tools that allow the organization to reduce threats from phishing attacks. Phishing has become a threat to organizations, generating in many cases millionaire losses. Impersonation as defined by some, seeks that people and organizations fall into deception, based on trust and relationship, to extract valuable information from them that allows them to generate economic income, in most cases. The attackers are devised with new strategies, using e-mail for the mass delivery of decoys, often attaching files that contain malware with ransomware, which allows them to seize a computer, in order to take economic advantage of the victim. According to research on the current problem of phishing, several authors have determined the importance of the end user to control it and tools have been developed that allow them to be trained in order to be an important role in the organization's security. These tools are based on a technical part and a training part and are complemented as a strategy to obtain better results.