Plan de Seguridad Informática mediante metodologías MAGERIT y OSSTMM V3 para tratamiento del riesgo de ataque hombre en el medio en entornos de red IEEE 802.11b/g/n de acceso libre.

Abstract

The current research work compared the risk of Man in the Middle Attack in two Free Access Wi-Fi network test environments; one with the implementation of a Risk Management Plan based on the Magerit methodology and another without any risk management planning applied. To carry out this evaluation, a Risk Management Plan was generated based on the Magerit methodology and was applied in one of the test environments. The security status was then assessed using the OSSTMM methodology and compared to a test environment that did not have the Risk Management Plan applied. The results of the study revealed that the environment in which the Magerit-based Risk Management Plan was applied experienced significant improvements in the evaluated security parameters compared to the environment without a risk management plan. It was concluded that the implementation of the Risk Management Plan based on the Magerit methodology can effectively reduce the risk of man-in-the-middle attacks in a public access Wi-Fi network environment. These results highlight the importance of risk management as an essential tool to strengthen security in vulnerable environments, such as publicly accessible Wi-Fi networks, and highlight the effectiveness of the Magerit methodology in this context.