Análisis de amenazas y vulnerabilidades de la gestión de procesos del sistema informático en la Cooperativa de Taxis San Fernando de Babahoyo

Abstract

For years web applications have been violated, allowing unauthorized elements to gain access to confidential information, causing a series of problems within organizations and Cooperatives in our country. Security in web applications is currently of vital importance, a large number of resources are being invested in order to neutralize the attacks to which they are exposed. The problem of the San Fernando taxi cooperative in the city of Babahoyo, is that it does not have certain threats and vulnerabilities to which they are exposed daily on its website, an unauthorized user can access the site and modify the information, as well how to take sensitive and confidential information from the Cooperative and its Members. They are suspicious of the CID triad (Confidentiality, Integrity, Availability) of the information that is used in the Web application. Currently, said software does not have a Software administrator, who performs its maintenance and improvements, causing a delay in the administrative processes of the cooperative. For this purpose, the case study was delimited, which allowed studying the availability of the Web system and assessing the cybersecurity mechanisms in it; for which, the research technique related to risk management analysis within computer systems was used, which is referred to as the MAGERIT methodology.