Diseño e implementación de una arquitectura de ciberseguridad para la micro-red de la Universidad de Cuenca

Abstract

Constant evolution of the Internet poses significant security challenges. Likewise, industrial systems are exposed to threats and vulnerabilities that can compromise data integrity. It is proposed to design and implement a cybersecurity architecture for the Micro-red de la Universidad de Cuenca, following standards, best practices, and security recommendations for Industrial Control Systems (ICS). Architecture involves planning, establishment, and maintenance of assets and systems with security in mind. This includes network segmentation based on enclaves through the configuration of a router and switches, using VLANs to separate visualization, servers, and field devices in the micro-grid. Firewall is employed to ensure only authorized traffic flows between enclaves. Access policies and restrictions were developed to control network assets by creating roles. A different access approach to the SCADA was implemented using Guacamole. Finally, a database is set up in Gestionnaire Libre de Parc Informatique (GLPI) for managing IT and OT assets, allowing support and monitoring. This architecture not only enhanced cybersecurity but also enabled a more organized and efficient operation of the laboratory, which previously had limited information about network status, topology, and assets.