Modelo base de conocimiento para auditorías de seguridad en servicios web con SQL injection

Abstract

Due to the large number of cyber-attacks at international and national level (Colombia), preventive mechanisms and procedures have been triggered in organizations, this in order to counteract these vulnerabilities in infor-mation security. The issue of this project arises from the need to make a proposal to the information security office of the DIAN to implement and follow up on the MinTIC Online Government Strategy in the Information Security and Privacy component, through the institutional information security policy and through this knowledge base model for audits in web services, applied to a particular prototype