<?xml version="1.0" encoding="ISO-8859-1"?><article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<front>
<journal-meta>
<journal-id>2218-3620</journal-id>
<journal-title><![CDATA[Revista Universidad y Sociedad]]></journal-title>
<abbrev-journal-title><![CDATA[Universidad y Sociedad]]></abbrev-journal-title>
<issn>2218-3620</issn>
<publisher>
<publisher-name><![CDATA[Editorial "Universo Sur"]]></publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id>S2218-36202019000100086</article-id>
<title-group>
<article-title xml:lang="es"><![CDATA[Sistema de gestión de comunicaciones para evaluar riesgos de seguridad]]></article-title>
<article-title xml:lang="en"><![CDATA[Communications management system to assess security risks]]></article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Toro Flores]]></surname>
<given-names><![CDATA[Yury A.]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Rivas Almonte]]></surname>
<given-names><![CDATA[Fancy U.]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Turpo Gebera]]></surname>
<given-names><![CDATA[Osbaldo]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Cuadros Paz]]></surname>
<given-names><![CDATA[Luis]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Fernández Gambarini]]></surname>
<given-names><![CDATA[Walter]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Valderrama Chauca]]></surname>
<given-names><![CDATA[Enrique]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
</contrib-group>
<aff id="Af1">
<institution><![CDATA[,Universidad Nacional de San Agustín  ]]></institution>
<addr-line><![CDATA[Arequipa ]]></addr-line>
<country>Perú</country>
</aff>
<pub-date pub-type="pub">
<day>00</day>
<month>03</month>
<year>2019</year>
</pub-date>
<pub-date pub-type="epub">
<day>00</day>
<month>03</month>
<year>2019</year>
</pub-date>
<volume>11</volume>
<numero>1</numero>
<fpage>86</fpage>
<lpage>92</lpage>
<copyright-statement/>
<copyright-year/>
<self-uri xlink:href="http://scielo.sld.cu/scielo.php?script=sci_arttext&amp;pid=S2218-36202019000100086&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://scielo.sld.cu/scielo.php?script=sci_abstract&amp;pid=S2218-36202019000100086&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://scielo.sld.cu/scielo.php?script=sci_pdf&amp;pid=S2218-36202019000100086&amp;lng=en&amp;nrm=iso"></self-uri><abstract abstract-type="short" xml:lang="es"><p><![CDATA[RESUMEN En los últimos años, los problemas de seguridad en redes o ciber-ataques están aumentando de forma exponencial en su faceta de sustracción de información confidencial y de secretos industriales, así como se ve afectado el desempeño de algunas organizaciones por el excesivo uso de redes sociales por parte de sus trabajadores. En ese propósito se trata de brindar un sistema que integra soluciones como Suricata-IDS (sistema de detección de intrusos) para detectar diversos tipos ataques en tiempo real y poder tomar acciones sobre los mismos, así como guardar el tráfico generado para poder evaluarlo cada vez que se actualicen las firmas de los IDS y poder medir así el impacto que tuvo en la organización durante un determinado tiempo, esta solución genera un conjunto de logs (registro de actividad de un sistema), los cuales serán almacenados para fines estadísticos. Para la evaluación del tráfico y la seguridad en la red se utilizará la metodología de seguridad informática, según Benson (2001), permite detallar cada una de sus fases para mitigar los riesgos. En los resultados obtenidos se puede observar el análisis de los logs generados por Suricata-IDS, un resumen de cuadros con el tráfico generado en la organización durante un periodo de tiempo determinado, así como un resumen de los ataques que fueron procesados o que se encuentran en cuarentena esperando ser analizados. Como conclusión, se obtiene que es de gran ayuda el almacenamiento de tráfico generado para evaluar los riesgos de seguridad, cada vez que un nuevo fallo de seguridad es descubierto para establecer controles de seguridad y reducir así la superficie de ataque y exposición, así como la presentación de resultados ante el usuario de una forma comprensible para la ayuda en la toma de decisiones respecto a las políticas de seguridad implementadas.]]></p></abstract>
<abstract abstract-type="short" xml:lang="en"><p><![CDATA[ABSTRACT In recent years, the security problems in networks or cyber attacks are increasing exponentially in the role as theft of confidential information and trade secrets, as well as is affected the performance of some organizations by overuse of social network part of their workers. The purpose of this document is to provide a system that integrates solutions such as Suricata IDS (intrusion detection system) to detect various type attacks in real time and to take actions on them, as well as keeping the traffic generated to evaluate each time that the signatures of the IDS are updated and able to measure the impact on the organization for a certain time, this solution generates a set of logs (activity log system), which will be stored for statistical purposes, for this investigation will be used security methodology according to Benson (2001), which will detail each of its phases to mitigate risks. In the results you can see the analysis of logs generated by Suricata IDS, a summary of pictures with traffic generated in the organization over a given time period and a summary of the attacks were prosecuted or found in quarantine, waiting to be analyzed. In conclusión, it is obtained that is helpful storage traffic generated to assess security risks every time a new security flaw is discovered to establish security control and reduce the attack surface and exposure, as well as the presentation of results to the user in an understandable for help in making decisions on security policies implemented.]]></p></abstract>
<kwd-group>
<kwd lng="es"><![CDATA[Sistema de detección de intrusos]]></kwd>
<kwd lng="es"><![CDATA[Control de seguridad]]></kwd>
<kwd lng="es"><![CDATA[Logs]]></kwd>
<kwd lng="es"><![CDATA[Superficie de ataque]]></kwd>
<kwd lng="en"><![CDATA[Intrusion detection system]]></kwd>
<kwd lng="en"><![CDATA[Security control]]></kwd>
<kwd lng="en"><![CDATA[Logs]]></kwd>
<kwd lng="en"><![CDATA[Attack Surface]]></kwd>
</kwd-group>
</article-meta>
</front><back>
<ref-list>
<ref id="B1">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Al-Dalky]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Salah]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Al-Qutayri]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Otrok]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
</person-group>
<source><![CDATA[Framework for a NetFPGA-based Snort NIDS]]></source>
<year>2014</year>
</nlm-citation>
</ref>
<ref id="B2">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Al-Dalky]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Salah]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Otrok]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Al-Qutayri]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Accelerating snort NIDS using NetFPGA-based Bloom filter]]></article-title>
<source><![CDATA[Wireless Communications and Mobile Computing Conference (IWCMC), 2014 International]]></source>
<year>2014</year>
<page-range>869-74</page-range><publisher-name><![CDATA[IEEE]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B3">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Amran]]></surname>
<given-names><![CDATA[A. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Saad]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[An evidential network forensics analysis model with adversarial capability and layering]]></article-title>
<source><![CDATA[Computer Applications and Information Systems (WCCAIS), 2014 World Congress on]]></source>
<year>2014</year>
<page-range>1-9</page-range><publisher-name><![CDATA[IEEE]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B4">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Atanasovski]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
<name>
<surname><![CDATA[Leon-Garcia]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[Future Access Enablers for Ubiquitous and Intelligent Infrastructures]]></source>
<year>2015</year>
<publisher-loc><![CDATA[Berlin ]]></publisher-loc>
<publisher-name><![CDATA[Springer]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B5">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Benson]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
</person-group>
<source><![CDATA[Estrategias de Seguridad]]></source>
<year>2001</year>
<publisher-loc><![CDATA[Birkirkara ]]></publisher-loc>
<publisher-name><![CDATA[Inobis Consulting Pty Ltd.]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B6">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Chakraborty]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Chaki]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Cortesi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[A New Intrusion Prevention System for Protecting Smart Grids from ICMPv6 Vulnerabilities]]></source>
<year>2014</year>
<conf-name><![CDATA[ 2014 Federated Conference on Computer Science and Information Systems]]></conf-name>
<conf-loc> </conf-loc>
<page-range>1539-47</page-range></nlm-citation>
</ref>
<ref id="B7">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Han]]></surname>
<given-names><![CDATA[S. W.]]></given-names>
</name>
<name>
<surname><![CDATA[Kwon]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Hahn]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Koo]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Hur]]></surname>
<given-names><![CDATA[J]]></given-names>
</name>
</person-group>
<source><![CDATA[A survey on MITM and its countermeasures in the TLS handshake protocol]]></source>
<year>2016</year>
<conf-name><![CDATA[ EighthInternational Conference on Ubiquitous and Future Networks]]></conf-name>
<conf-loc> </conf-loc>
</nlm-citation>
</ref>
<ref id="B8">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Husák]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Cermák]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Jirsík]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Celeda]]></surname>
<given-names><![CDATA[P]]></given-names>
</name>
</person-group>
<source><![CDATA[Network-based HTTPS client identification using SSL/TLS fingerprinting. In Availability, Reliability and Security]]></source>
<year>2015</year>
<conf-name><![CDATA[ 10thInternational Conference on Availability, Reliability and Security]]></conf-name>
<conf-loc> </conf-loc>
</nlm-citation>
</ref>
<ref id="B9">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Lee]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Yun]]></surname>
<given-names><![CDATA[S]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Hybrid memory-efficient multimatch packet classification for NIDS]]></article-title>
<source><![CDATA[Microprocessors and Microsystems]]></source>
<year>2015</year>
<volume>39</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>113-21</page-range></nlm-citation>
</ref>
<ref id="B10">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Maheshwari]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Krishna]]></surname>
<given-names><![CDATA[C. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Brahma]]></surname>
<given-names><![CDATA[M. S.]]></given-names>
</name>
</person-group>
<source><![CDATA[Defending network system against IP spoofing based distributed DoS attacks using DPHCF-RTT packet filtering technique]]></source>
<year>2014</year>
<conf-name><![CDATA[ International Conference on Issues and Challenges in Intelligent Computing Technique]]></conf-name>
<conf-loc> </conf-loc>
</nlm-citation>
</ref>
<ref id="B11">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Poljak]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[&#352;evo]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Livaja]]></surname>
<given-names><![CDATA[I.]]></given-names>
</name>
</person-group>
<source><![CDATA[Security and privacy in an IT context-A low-cost WIDS employed against MITM attacks (concept)]]></source>
<year>2016</year>
<conf-name><![CDATA[ 39International Convention on Information and Communication Technology, Electronics and Microelectronics]]></conf-name>
<conf-loc> </conf-loc>
</nlm-citation>
</ref>
<ref id="B12">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Selvi]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[Bypassing HTTP strict transport security]]></source>
<year>2014</year>
<publisher-name><![CDATA[Black Hat Europe]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B13">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Urueña]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Ciberataques, la mayor amenaza actual]]></article-title>
<source><![CDATA[Documento de Opinión]]></source>
<year>2015</year>
<volume>9</volume>
</nlm-citation>
</ref>
<ref id="B14">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Vidal]]></surname>
<given-names><![CDATA[J. M.]]></given-names>
</name>
<name>
<surname><![CDATA[Orozco]]></surname>
<given-names><![CDATA[A. L. S.]]></given-names>
</name>
<name>
<surname><![CDATA[Villalba]]></surname>
<given-names><![CDATA[L. J. G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Quantitative criteria for alert correlation of anomalies-based nids]]></article-title>
<source><![CDATA[IEEE Latin America Transactions]]></source>
<year>2015</year>
<volume>13</volume>
<numero>10</numero>
<issue>10</issue>
<page-range>3461-6</page-range></nlm-citation>
</ref>
<ref id="B15">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Zhang]]></surname>
<given-names><![CDATA[Y. P.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Design for the Application Layer of Network Security Solutions]]></article-title>
<source><![CDATA[Advanced Materials Research]]></source>
<year>2014</year>
<page-range>998-1113-1116</page-range></nlm-citation>
</ref>
</ref-list>
</back>
</article>
