Evaluación de la seguridad de la red de área local en la 15BAE PAQUISHA , mediante el análisis de herramientas Open Source y la adaptación de un marco referencial de seguridad

Abstract

Abstract: This research aimed to evaluate the security of the Local Area Network (LAN) of the Army Aviation Brigade No. 15 "PAQUISHA" through the application of Open Source tools and the adaptation of a security reference framework based on the ISO/IEC 27001, ISO/IEC 27002, and ISO/IEC 27005 standards. The methodology included the characterization of the technological infrastructure, the identification of institutional requirements, the development of the reference framework, and its implementation using the Nmap, Wireshark, and Suricata tools to obtain technical evidence regarding the security status of the network. The results made it possible to identify technological assets, analyze network traffic behavior, detect security events, and assess risks associated with the technological infrastructure. Based on these findings, a security reference framework was adapted, and an implementation plan was designed to strengthen asset management, continuous monitoring, incident management, and risk management, providing a methodology supported by technical evidence that can be replicated in organizations with similar technological environments.