Implementación de un Framework de pentesting para el laboratorio de Micro-Red de la Universidad de Cuenca

Abstract

Industrial Control System (ICS) are essential for managing critical infrastructure in sectors such as energy, water treatment, and manufacturing. The increasing interconnection of these systems with broader networks, such as the Internet, has made them attractive targets for cyberattacks, with potentially severe economic and environmental repercussions. To mitigate these threats, the University of Cuenca, through its Micro-Grid laboratory, developed and implemented a White Box pentesting framework, designed to identify vulnerabilities in the laboratory’s assets, which operate with solar, wind, and thermal energy sources. The first phase of the project involved cataloging the laboratory’s assets and topology using tools like Gestionnaire Libre de Parc Informatique (GLPI) and OpenCVE. Subsequently, the Daniz-Red framework was adapted to perform pentesting on operational technology devices, incorporating the management of protocols such as Modbus and Simple Network Management Protocol (SNMP), and enhancing vulnerability scanning tools. Preliminary results indicated the necessary corrections to strengthen security without disrupting operations. Additionally, a hardening process was carried out on the laboratory’s critical servers, applying audit and remediation scripts based on Center for Internet Security (CIS) recommendations. This effort resulted in the optimization of the laboratory’s security, effectively addressing all detected vulnerabilities, improving the confidentiality, integrity, and availability of the systems, and strengthening the laboratory’s security infrastructure in line with fundamental principles of information security.