Bibliographic citations
Aguilar, A., Meléndez, R. (2020). Modelo de referencia para identificar el nivel de madurez de ciberinteligencia de amenazas en la dark web [Tesis, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/653512
Aguilar, A., Meléndez, R. Modelo de referencia para identificar el nivel de madurez de ciberinteligencia de amenazas en la dark web [Tesis]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2020. http://hdl.handle.net/10757/653512
@misc{renati/1288458,
title = "Modelo de referencia para identificar el nivel de madurez de ciberinteligencia de amenazas en la dark web",
author = "Meléndez Santos, Ricardo Alfonso",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2020"
}
The dark web is an area conducive to illegal activities of all kinds. In recent times, cybercriminals are changing their approach towards information trafficking (personal or corporate) because the risks are much lower compared to other types of crime. There is a wealth of information hosted here, but few companies know how to access this data, evaluate it, and minimize the damage it can cause. In this work, we propose a reference model to identify the maturity level of the Cyber Intelligence Threat process. This proposal considers the dark web as an important source of cyber threats causing a latent risk that organizations do not consider in their cybersecurity strategies. The proposed model aims to increase the maturity level of the process through a set of proposed controls according to the information found on the dark web. The model consists of 3 phases: 1. Identification of information assets using cyber threat intelligence tools. 2. Diagnosis of the exposure of information assets. 3. Proposal of controls according to the proposed categories and criteria. The validation of the proposal was carried out in an insurance institution in Lima, Peru with data obtained by the institution. Preliminary results showed 196 emails and passwords exposed on the dark web of which 1 corresponded to the Technology Manager of the company under evaluation. With this identification, it was diagnosed that the institution was at a “Normal” maturity level, and from the implementation of the proposed controls the “Advanced” level was reached.
This item is licensed under a Creative Commons License