Evaluación de herramientas de software para la detección de vulnerabilidades y malas prácticas de seguridad en arquitecturas Cloud native Microsoft Azure

Abstract

Abstract: It is crucial to identify and mitigate vulnerabilities and poor practices that can compromise the integrity, confidentiality, and availability of cloud-native systems. The issue addresses the detection of vulnerabilities and security misconfigurations in Cloud Native architectures. The scope aims to identify, analyze, and select tools for vulnerability detection in Microsoft Azure and evaluate their management capabilities. The methodology included a review of existing literature on security in Cloud Native environments, the selection and evaluation of open-source software tools, identifying those best suited to the needs of these architectures. Scenarios were deployed and configured to evaluate the selected tools. Based on the results, conclusions and recommendations are presented, which in our view will help improve the security posture of Cloud Native applications, including the set of tools with the best performance according to the evaluated parameters. Chapter 1 contextualizes security in Cloud Native architectures. Chapter 2 analyzes key concepts and previous studies. Chapter 3 covers Scenario Design. Chapter 4 presents Tool Evaluation. Finally, conclusions and recommendations are stated.