Análisis de factores de seguridad informática mediante la metodología OWASP v4.2: Caso de estudio ISTJOL

Abstract

With the emergence of COVID-19 and COVID-40 worldwide, the use of information and communication technology tools has been enhanced in all areas of society, especially in education. The use of Moodle has been evidenced in being one of the most widely used virtual development environments by most higher education institutions worldwide given the multiple advantages it offers in the teaching-learning process. Thus, the José Ochoa León Higher Institute of Technology maintains its classes, teaching resources and continuing education courses through the use of this tool. When used, a great deal of relevant information is fluctuated and transferred to the actors of education, which are students, teachers and administrators, therefore the importance of keeping safe and safeguarding the information generated, shared and stored. Web security focuses its fundamental pillars on maintaining the integrity, confidentiality and availability of information, so the OWASP web security test guide was used in its current and stable version to date, allowing the detection of vulnerabilities within configurations, both in the Moodle web application and in the Apache web server, through the use of automated tools such as OWASP ZAP, Nessus Wireshark and Nmap. According to the results of the aforementioned tools, 7 vulnerabilities have been detected, linked to moderate level risks for one vulnerability, two high and four low, Therefore, in the research, there are the alternatives of solution for each vulnerability found and achieve to minimize the threats and risks of exploitation.