Implantación De Una Herramienta Ossim Para El Monitoreo Y Gestión De La Seguridad De La Red Y Plataformas Windows Y Linux Aplicado A Empresas Medianas

Abstract

This article is to present an analysis of the security of the network infrastructure and servers in a private company, the main focus is to keep centralized all events "logs" that are generated by different servers and network devices a single management console and perform an analysis of each event, also getting custom reports of vulnerabilities on hosts that run under the Windows operating system, the different attacks in the devices and the status of the network in general. Thus, through the development of this document, we are to present a software solution with the implementation of the tool called OSSIM, this software is an open source application and It isn't a just a tool to monitor events "logs" it's also a SIEM (Security Information and Event Management) and has a built tools and more ways to manage network security, databases, analyze viruses and malware on Windows systems operating, OSSIM is specifically aimed for network manager of the medium companies that need a comprehensive monitoring infrastructure, get real-time reports of what is happening in the network to analyze anomalies and to help in making decisions and corrections.