Método conciso para test de penetración en sistemas informáticos de empresas pequeñas privadas y públicas

Abstract

This study develops a brief method for the execution of penetration tests in modest technological infrastructures, providing the appropriate tools and establishing the necessary processes for its implementation in small, private and public organizations. Basic concepts of cybersecurity and countermeasures to computer attacks were examined, and relevant methodologies for penetration testing were delved, as a basis for the subsequent design of the proposed instrument. With the application of the case study, the designed tool was verified to be effective, useful, and quick to provide results while optimizing the use of resources, which translates into significant savings for companies. Finally, the results show the lack of professionals in the cyber security area, and also a lack of awareness by small companies on this topic, and the associated risks with cyberattacks