Análisis experimental del estado de seguridad en la red inalámbrica de la ESPOL mediante ataques controlados detallando vulnerabilidades y presentando técnicas de prevención y mitigación

Abstract

This project focused on the security of the ESPOL University’s Wireless LAN which is used by all the users with accounts in the domain espol.edu.ec such as students and teachers. The analysis was done by performing techniques of attack in a controlled way so that it was not harmful to the institution and the users. In the first part it was possible to obtain access to the wireless network with valid credentials by applying social engineering tools based on computer producing an identity theft. In the second part, once inside the network it was possible to attack the internal servers that are managed by Centro de Tecnologías de Información (CTI) through denial of service attacks. All these attacks were analyzed according to their way of operation and the results they yielded and then presented favorable solutions to these scenarios for preventing and mitigating the lack of security in the wireless LAN.