Avaliação da segurança da rede Lan da UTFPR-MD mediante a um teste de penetração

Abstract

Nowadays institutions such as banks, companies and universities are dependent on computerized systems and data transmission networks to be efficiently operational. For that reason, it is essential that those systems and networks provide a satisfying level of security and reliability. Considering that on the UTFPR-MD’s cenario, the present paper proposes to conduct a penetration test on the network and systems employed within the university. Although it is not guaranteed that the tested system will be completely safe and secure after the completion of it, this type of test is the most effective way to assess the current security level of a system and consequently improve it. The test will be performed using the Penetration Testing Execition Standardard (PTES) methodology , producing a detailed report on the current situation of the security mechanisms running on the network and systems of UTFPR-MD’s campus, as well as pointing any security faults and their solutions. The proposed test was able to detect several potential vulnerabilities in devices found active on the university’s LAN network, showing that there are points where the network security can be improved.