Cargando...
Fecha
2023-06
Editor/a
Director/a
Tutor/a
Coordinador/a
Prologuista
Revisor/a
Ilustrador/a
Derechos de acceso
info:eu-repo/semantics/openAccess
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad Nacional de Educación a Distancia (UNED). E.T.S. de Ingeniería Informática
Citas
0 citas en 
0 citas en 
Resumen
Las redes definidas por software, o también conocidas por su acrónico SDN, son una tecnología emergente y relativamente nueva que aporta un paradigma y un diseño diferente al conocido en las redes tradicionales, siendo su principal característica lo altamente programables que pueden llegar a ser. Dentro de su arquitectura, su elemento principal es el controlador encargado de brindar la inteligencia necesaria a la red, por lo tanto, es considerado un punto único de fallo. Al ser una tecnología moderna que sigue en constante evolución y crecimiento, muchas investigaciones indican que se ha enfocado mucho en el diseño y la funcionalidad de este nuevo modelo de arquitectura de red, y se ha dejado un poco de lado el aspecto de la seguridad, el cual es un factor muy importante para tomar en cuenta vista la naturaleza inherente de una SDN.
En este proyecto se realiza un estudio inicial de la arquitectura de una SDN, sus elementos y sus principales características, se elige un controlador para ser implementado en un entorno virtualizado, concretamente se elige el controlador de ONOS; luego se realiza sobre esta arquitectura un pentesting, con el objetivo de estudiar y analizar las vulnerabilidades y las principales amenazas de seguridad; finalmente se plantea un plan de mitigación y se estudian diversas soluciones que permitan detectar y mitigar las amenazas de seguridad identificadas, para implementarla dentro del entorno virtualizado y poder discernir si efectivamente la solución elegida se adapta bien a las necesidades de seguridad; concretamente se implementa el SIEM de Wazuh que presenta muchas característica interesante que pueden ayudar a mitigar las amenazas dentro de la arquitectura SDN.
En el proceso de estudio y análisis de amenazas se ejecutan diversas metodologías que permiten aplicar mejores prácticas para analizar, testear y encontrar una solución de seguridad de tipo open source que se adapte lo mejor posible a la arquitectura SDN virtualizada. Finalmente, se presentan las conclusiones y recomendaciones del estudio realizado en base a los resultados obtenidos.
Software-defined networks, or also known by their acronym SDN, are an emerging and relatively new technology that provides a paradigm and a design different from that known in traditional networks, its main characteristic being how highly programmable they can be. Within its architecture, its main element is the controller in charge of providing the necessary intelligence to the network, therefore, it is considered a single point of failure. Being a modern technology that continues to constantly evolve and grow, many investigations indicate that a lot of focus has been placed on the design and functionality of this new model of network architecture, and the security aspect has been left a bit aside, which is a very important factor to take into account given the inherent nature of an SDN. In this project an initial study of the architecture of an SDN, its elements and its main characteristics is carried out, a controller is chosen to be implemented in a virtualized environment, specifically the ONOS controller is chosen; then a pentesting is carried out on this architecture, with the aim of studying and analyzing the vulnerabilities and the main security threats; Finally, a mitigation plan is proposed and various solutions are studied to detect and mitigate the identified security threats, to implement it within the virtualized environment and to be able to discern if the chosen solution is effectively adapted to the security needs; Specifically, the Wazuh SIEM is implemented, which presents many interesting features that can help mitigate threats within the SDN architecture. In the process of study and analysis of threats, various methodologies are used to apply best practices to analyze, test and find an open source security solution that best suits the virtualized SDN architecture. Finally, the conclusions and recommendations of the study carried out based on the results obtained are presented.
Software-defined networks, or also known by their acronym SDN, are an emerging and relatively new technology that provides a paradigm and a design different from that known in traditional networks, its main characteristic being how highly programmable they can be. Within its architecture, its main element is the controller in charge of providing the necessary intelligence to the network, therefore, it is considered a single point of failure. Being a modern technology that continues to constantly evolve and grow, many investigations indicate that a lot of focus has been placed on the design and functionality of this new model of network architecture, and the security aspect has been left a bit aside, which is a very important factor to take into account given the inherent nature of an SDN. In this project an initial study of the architecture of an SDN, its elements and its main characteristics is carried out, a controller is chosen to be implemented in a virtualized environment, specifically the ONOS controller is chosen; then a pentesting is carried out on this architecture, with the aim of studying and analyzing the vulnerabilities and the main security threats; Finally, a mitigation plan is proposed and various solutions are studied to detect and mitigate the identified security threats, to implement it within the virtualized environment and to be able to discern if the chosen solution is effectively adapted to the security needs; Specifically, the Wazuh SIEM is implemented, which presents many interesting features that can help mitigate threats within the SDN architecture. In the process of study and analysis of threats, various methodologies are used to apply best practices to analyze, test and find an open source security solution that best suits the virtualized SDN architecture. Finally, the conclusions and recommendations of the study carried out based on the results obtained are presented.
Descripción
Categorías UNESCO
Palabras clave
SDN, Virtualización, ONOS, Mininet, Pentesting, Offensive Security, OCTAVE, NSM, Ataques, Vulnerabilidades, Detección, Mitigación, SIEM, Wazuh, Virtualization, Mininet, Pentesting, Offensive Security, NSM, Attacks, Vulnerabilities, Detection, Mitigation
Citación
Carrillo Guevara, César. Trabajo Fin de Máster: "Estudio de amenazas de seguridad en una arquitectura SDN y la implementación de una solución para detectarlas y mitigarlas". Universidad Nacional de Educación a Distancia (UNED) 2025
Centro
E.T.S. de Ingeniería Informática