Aplicación de la técnica de esteganografía para el mejoramiento de la integridad de la información en sistemas académicos basados en la web, caso práctico https://sisepec.espoch.edu.ec, 2021.

Abstract

The objective was to improve the integrity of web-based academic systems, through the application of steganography, practical case https://sisepec.espoch.edu.ec. 2021. Steganography was used as a method to mitigate website cloning vulnerability, in which code that validates the website's domain is hidden, triggering various authentication methods and announcing to the user that they are browsing a site true website. In the same way, in case the website has been cloned and built on another domain, the hidden code executes a script that announces to the administrator that there is a vulnerability detected by means of an email. The methodology used during a phishing attack to steal sensitive information, while performing a comparative analysis of an academic website, demonstrating that it is possible to improve one of the fundamental pillars of information security such as integrity, through steganography; it was carried out after the cloning of the website, the implementation of double authentication and finally the inclusion of the steganographic code. During the comparison made of the current environment vs. the scenario embodied with the steganography technique, a significant improvement can be seen with respect to the integrity of the website and the mitigation of the vulnerability presented in the login pages. The investigation concludes with recommendations that refer to the implementation of the steganographic technique, as well as the version of the code used in the development of the login pages.