Implementation of Security Controls for the Treatment of Malware Using Breach and Attack Simulation

Roque M.S.C.; Chancahuana J.P.G.; Flores R.M. · Proceedings of the 2024 IEEE 31st International Conference on Electronics, Electrical Engineering and Computing, INTERCON 2024 (2024) · DOI: 10.1109/intercon63140.2024.10833511

Resumen

Currently there is a significant increase in cyber-attacks associated with increased access to the digital world, where every company focuses its efforts on becoming digitally transformed. The systems present new vulnerabilities that put at risk key assets and sensitive data and where the need to implement better and more effective security controls to protect this valuable resource is born. This paper proposes the use of an architectural model with security controls aligned to NIST standards, using Breach and Attack Simulation (BAS) technologies to improve threat detection in real time and increase the effectiveness of these controls. To this end, security tools such as EDR, WAF, IPS and IDS were implemented in a controlled simulation environment, under NIST standards and using BAS as a key technology. With this architecture we obtained an improvement in the analysis and detection times of threats, with an effectiveness of 80% in detection, protecting the IT infrastructure and the commercial image of the companies in which it was implemented, with which it was possible to determine that the proposed model optimized the protection of assets through the timely detection of threats and an increase in the efficiency of security controls.

Instituciones: Universidad Peruana de Ciencias Aplicadas