Implementación de una herramienta para el monitoreo de la seguridad de la red basado en Open Source Security Information Management (OSSIM) para el Gobierno Autónomo Descentralizado del cantón Pichincha

Abstract

Abstract: This thesis addresses the implementation of the OSSIM (Open Source Security Information Management) system as a solution to strengthen the IT security of the Decentralized Autonomous Government (GAD) of the canton of Pichincha. The objective was to establish a comprehensive system that allows for monitoring, identifying, and responding to threats by centralizing security events. During the initial analysis, several critical weaknesses were detected: the absence of a dedicated firewall, a lack of network segmentation, and a lack of a centralized event logging system. These weaknesses exposed the GAD to the risk of cyberattacks and the loss of sensitive information. In response, OSSIM was implemented alongside tools such as OpenVAS and OSSEC, which allowed for the detection of anomalous patterns, vulnerability assessments, and the generation of real-time alerts. The results demonstrate a considerable improvement in information security, facilitating continuous monitoring. This project represents a significant step forward toward a proactive approach to IT security. It is recommended to keep the system updated and include training programs for ICT staff to ensure the continuity and effectiveness of the implemented system.