Análisis bibliométrico sobre Ciberseguridad: técnica de ataque de suplantación de identidad y evolución

Yair Rivera; Angel Dario Pinto Mangone; Samir Castaño; Juan Manuel Torres Tovio; Frank Ibarra Hernández; Pedro Guevara

Análisis bibliométrico sobre Ciberseguridad: técnica de ataque de suplantación de identidad y evolución

Yair Rivera ^[1] ; Angel Dario Pinto Mangone ^[2] ; Samir Castaño ^[3] ; Juan Manuel Torres Tovio ^[2] ; Frank Ibarra Hernández ^[2] ; Pedro Guevara ^[3]
1. [1] Corporación Universitaria Americana
  
  Corporación Universitaria Americana
  
  Colombia
2. [2] Universidad del Sinú
  
  Universidad del Sinú
  
  Colombia
3. [3] Universidad de Córdoba
  
  Universidad de Córdoba
  
  Cordoba, España
Mostrar afiliaciones +
Localización: RISTI: Revista Ibérica de Sistemas e Tecnologias de Informação, ISSN-e 1646-9895, Nº. Extra 52, 2022, págs. 21-35
Idioma: español
Títulos paralelos:
- Bibliometric Analysis on Cybersecurity: Spoofing attack techniques and evolution
Enlaces
- Texto completo (pdf)
Resumen
- español
  Se presentará un análisis Bibliométrico y una tabla taxonómica de como la técnica de ataque contra la confidencialidad en redes de datos Spoofing ha evolucionado acorde a otras instancias tecnológicas de la seguridad informática. El objetivo es proporcionar un conocimiento sobre la selección del tipo de Spoofing y su desarrollo a través de una herramienta especifica tecnológica. Se definirán diferentes tipos de Spoofing y su influencia en otras áreas del conocimiento. Se establecerá un esquema serial de cómo se compone un ataque de Spoofing, y que pasos incluyen, igualmente se mostrará a través de pequeñas capturas un ejemplo de un ataque de tipo ARP Spoofing a través de Kali Linux para dar a conocer cómo sería este tipo de ataque hacia un cliente determinado y cual seria su arquitectura en una red de datos. Se utilizará la herramienta Ettercap de Kali Linux para realizar un ataque.
- English
  Bibliometric analysis and a taxonomic table of how the spoofing attack technique against confidentiality in data networks has evolved according to other technological instances of computer security will be presented. The objective is to provide knowledge on the selection of the type of spoofing and its development through a specific technical tool. Different types of spoofing and their influence on other areas of expertise will be defined. A series of how a spoofing attack is composed will be established and which steps are included. An example of an ARP spoofing attack through Kali Linux will be shown through small screenshots to show how this type of attack would be towards a specific client and what would be its architecture in a data network. The Kali Linux Ettercap tool will be used to perform an attack.
Referencias bibliográficas
- Anthony, P., Ay, B., & Aydin, G. (2021). A review of face anti-spoofing methods for face recognition systems. 2021 International Conference...
- Bethi, P., Pathipati, S., & Aparna, P. (2020, December 10). Stealthy GPS spoofing: Spoofer systems, spoofing techniques, and strategies....
- Bernard, P. (2012). COBIT® 5 – A Management Guide. Amersfoort, NL: Van Haren Publishing.
- Beyer, J., & Trice, H. (1987). How an organization’s rites reveal its culture. Organizational Dynamics, 15(4), 5-24. https://doi.org/10.1016/0090-2616(87)90041-6
- Bonabeau, E. (2002). Predicting the unpredictable. Harvard Business Review, 80(3), 109-116.
- Buccafurri, F., Fotia, L., Furfaro, A., Garro, A., Giacalone, M., & Tundis, A. (2015). An analytical processing approach to supporting...
- Bulgurcu, B., Cavusoglu, H., & Benbasat, I. (2010). Information security policy compliance: An empirical study of rationality-based beliefs...
- Davenport, T. H., & Prusak, L. (1998). Working knowledge: How organizations manage what they know. Boston: Harvard Business School Press.
- Debreceny, R., & Gray, G. (2013). IT governance and process maturity: A multinational field study. Journal of Information Systems, 27(1),...
- Dhillon, G., & Backhouse, J. (2000). Technical opinion: information system security management in the new millennium. Communications of...
- Europol (2020). How COVID-19-related crime infected Europe during 2020. https://www.europol.europa.eu/publications-documents/how-covid-19-related-crime-infected-europe-during-2020....
- Farazzmanesh, F., & Hosseini, M. (2017). Analysis of business customers’ value network using data mining techniques. Journal of Information...
- Gao, F., Rau, P. L. P., & Zhang, Y. (2018). Perceived mobile information security and adoption of mobile payment services in China. In...
- Gerl, A., von der Heyde, M., Groß, R., Seck, R., & Watkowski, L. (2021). Applying COBIT 2019 to IT governance in higher education. In:...
- Gleiser, I. (2002). Caos e Complexidade: a evolução do pensamento econômico. RJ: Campus.
- Grassegger, T., & Nedbal, D. (2021). The role of employees’ information security awareness on the intention to resist social engineering....
- Hadlington, L., Binder, J., & Stanulewicz, N. (2021). Exploring the role of moral disengagement and counterproductive work behaviours...
- Hofstede, G. (1984). Culture’s consequences: international differences in work-related values. London: Sage Publications.
- Information Technology Governance Institute - ITGI (2003). Board briefing on IT governance (2nd ed.). IL: IT Governance Institute.
- Information Technology Governance Institute - ITGI (2007). COBIT 4.1: Framework, control objectives, management guidelines, maturity models....
- Instituto Brasileiro de Governança Corporativa - IBGC (2015). Código das melhores práticas de governança corporativa (5th ed.). São Paulo:...
- Instituto Brasileiro de Governança Corporativa - IBGC (2020). O que é governança corporativa. São Paulo: IBGC.
- ISACA (2012). COBIT 5 – Modelo corporativo para governança e gestão de TI da organização. Rolling Meadows, IL: ISACA.
- ISACA (2018). What is COBIT 5? Rolling Meadows, IL: ISACA.
- ISACA (2021). Design guide and toolkit: Designing an information & technology governance solution. Rolling Meadows, IL: ISACA.
- ISO/IEC 27002: 2007. Tecnologia da Informação – Código de prática para a gestão da segurança da informação. Rio de Janeiro: Associação Brasileira...
- ISO/IEC 27032: 2012. Information technology: Security techniques: Guidelines for cybersecurity. Geneva: International Organization for Standardization.
- Justitiaa, A., Zaman, B., & Putra, D. (2021). Evaluating the quality of a help-desk complaint management service using Six-Sigma and COBIT...
- Kaplan, R. S., & Norton, D. P. (2004). Strategy maps: Converting intangible assets into tangible outcomes. USA: Harvard Business School...
- Klir, G. J., Clair, U. H. S., & Yuan, B. (1997). Fuzzy Set Theory: Foundations and Applications. London: Prentice-Hall.
- Malatji, M., Marnewick, A. L., & Von Solms, S. (2021). Cybersecurity capabilities for critical infrastructure resilience. Information...
- Mintzberg, H. (1994). The rise and fall of strategic planning. New York: Free Press.
- Mintzberg, H., Ahlstrand, B., & Lampel, J. (1998). Strategy safari: A guided tour through the wilds of strategic management. New York:...
- Morgan, G. (1986). Images of Organization. London: Sage.
- Morin, E. (2003). Introdução ao pensamento complexo (4th ed.). Lisboa: Instituto Piaget.
- OECD (2018). G20/OECD principles of corporate governance. Paris, France: OECD Publishing. https://doi.org/10.1787/9789264236882-en
- Peters, T., & Waterman, R. (1982). In Search of Excellence: Lessons from America’s best-run companies. USA: Harper Business.
- Porter, M. (1990). Vantagem competitiva: criando e sustentando um desempenho superior. Rio de Janeiro: Campus.
- Prahalad, C. K., & Hamel, G. (1990). The core competence of the corporation. Harvard Business Review, 68(3), 79-91.
- Raisinghani, M. S. (2000). Knowledge management: A cognitive perspective on business and education. American Business Review, 18(2), 105-112.
- Rohn, E., Sabari, G., & Leshem, G. (2016). Explaining small business InfoSec posture using social theories. Information and Computer Security,...
- Safa, N. S., Von Solms, R., & Furnell, S. (2016). Information security policy compliance model in organizations. Computers & Security,...
- Schein, E. (1992). Organizational Culture and Leadership. San Francisco: Jossey-Bass.
- Shamala, P., Ahmad, R., Zolait, A. H., & bin Sahib, S. (2015). Collective information structure model for Information Security Risk Assessment...
- Simon, H. A. (1961). Administrative behavior (2nd ed.). New York: Macmillan.
- Simon, H. A. (1996). The sciences of the artificial (3rd ed.). Cambridge: MIT Press.
- Slayton, R. (2021). Governing uncertainty or uncertain governance? Information security and the challenge of cutting ties. Science, Technology,...
- Spears, J. L., & Barki, H. (2010). User participation in information systems security risk management. MIS Quarterly, 34(3), 503-522....
- Trice, H., & Beyer, J. (1984). Studying organizational cultures through rites and ceremonials. The Academy of Management Review, 9(4),...
- Weill, P., & Ross, J. W. (2005). IT governance: How top performers manage IT decision rights. USA: Harvard Business Review Press.
- Wilkin, C., & Chenhall, T. (2010). A review of IT governance: A taxonomy to inform accounting information systems. Journal of Information...
- Wright, P., Kroll, M. J., & Parnell, J. A. (1998). Strategic management: concepts and cases. New Jersey: Prentice Hall.
- Young, R. F., & Windsor, J. (2010). Empirical evaluation of information security planning and integration. Communications of the Association...
- Zadeh, L. A. (1965). Fuzzy sets. Information and Control, 8(3), 338-353. https://doi.org/10.1016/S0019-9958(65)90241-X