Análisis de Vulnerabilidades a los Sistemas Informáticos de la Empresa Ingenio Azucarero del Norte de Compañía de Economía Mixta “IANCEM” Basado en la Metodología OWASP
No Thumbnail Available
Date
2025
Journal Title
Journal ISSN
Volume Title
Publisher
PUCE - Ibarra
Abstract
En el panorama empresarial actual, caracterizado por una creciente dependencia de la tecnología, las empresas del sector productivo se enfrentan a desafíos sin precedentes en materia de ciberseguridad. IANCEM, una empresa líder en la comercialización de azúcar en el norte de Ecuador, no es una excepción a esta realidad. A pesar de haber modernizado recientemente sus instalaciones para optimizar la producción y cumplir con rigurosas normas ambientales, IANCEM se encuentra en una posición vulnerable en lo que respecta a la seguridad de sus sistemas informáticos. La presente investigación surge de la necesidad crítica de evaluar y fortalecer la postura de seguridad de IANCEM en el entorno digital. Aunque la empresa ha implementado medidas de seguridad en sus sistemas informáticos, estas no han sido sometidas a una validación exhaustiva para determinar su efectividad frente a la creciente sofisticación de los ciberataques. Esta brecha en la validación representa un riesgo significativo para la integridad de los datos, la continuidad operativa y, en última instancia, la reputación de la empresa en un mercado cada vez más competitivo y consciente de la seguridad. El objetivo principal de este estudio es realizar un análisis comprehensivo y meticuloso de los sistemas informáticos de IANCEM, utilizando como marco de referencia la metodología OWASP (Open Web Application Security Project). Esta elección metodológica no es arbitraria; OWASP se ha establecido como un estándar de facto en la industria de la seguridad informática, ofreciendo un enfoque estructurado y actualizado para la identificación, evaluación y mitigación de riesgos de seguridad en los sistemas. El análisis se centrará en la detección y evaluación de una amplia gama de vulnerabilidades potenciales, con especial énfasis en aquellas que han demostrado ser particularmente críticas en entornos empresariales similares.
In today's business landscape, characterized by an increasing dependence on technology, companies in the productive sector face unprecedented cybersecurity challenges. IANCEM, a leading sugar trading company in northern Ecuador, is no exception to this reality. Despite having recently modernized its facilities to optimize production and comply with rigorous environmental standards, IANCEM is in a vulnerable position when it comes to the security of its web systems. This investigation arises from the critical need to assess and strengthen IANCEM's security posture in the digital environment. Although the company has implemented security measures on its web systems, these have not been subjected to thorough validation to determine their effectiveness against the increasing sophistication of cyberattacks. This gap in validation represents a significant risk to data integrity, operational continuity, and ultimately the company's reputation in an increasingly competitive and security-conscious market. The main objective of this study is to perform a comprehensive and meticulous analysis of IANCEM web systems, using the OWASP (Open Web Application Security Project) methodology as a reference framework. This methodological choice is not arbitrary; OWASP has established itself as a de facto standard in the IT security industry, offering a structured and up-to-date approach to the identification, assessment and mitigation of security risks in web applications. The analysis will focus on the detection and assessment of a wide range of potential vulnerabilities, with special emphasis on those that have proven to be particularly critical in similar business environments.
In today's business landscape, characterized by an increasing dependence on technology, companies in the productive sector face unprecedented cybersecurity challenges. IANCEM, a leading sugar trading company in northern Ecuador, is no exception to this reality. Despite having recently modernized its facilities to optimize production and comply with rigorous environmental standards, IANCEM is in a vulnerable position when it comes to the security of its web systems. This investigation arises from the critical need to assess and strengthen IANCEM's security posture in the digital environment. Although the company has implemented security measures on its web systems, these have not been subjected to thorough validation to determine their effectiveness against the increasing sophistication of cyberattacks. This gap in validation represents a significant risk to data integrity, operational continuity, and ultimately the company's reputation in an increasingly competitive and security-conscious market. The main objective of this study is to perform a comprehensive and meticulous analysis of IANCEM web systems, using the OWASP (Open Web Application Security Project) methodology as a reference framework. This methodological choice is not arbitrary; OWASP has established itself as a de facto standard in the IT security industry, offering a structured and up-to-date approach to the identification, assessment and mitigation of security risks in web applications. The analysis will focus on the detection and assessment of a wide range of potential vulnerabilities, with special emphasis on those that have proven to be particularly critical in similar business environments.
Description
Keywords
Ciberseguridad, Sistemas informáticos, Owasp, Owasp zap, Validación de seguridad, Vulnerabilidades, Inyección sql, Gestión de sesiones