Estrategia tecnológica para mitigar ataques informáticos en una aplicación en la nube mediante algoritmos de seguridad para la Empresa Colombian Technology Group S.A.S

Abstract

The adoption of Cloud Computing or Computing in the Cloud by companies brings many benefits such as the high availability of the infrastructure by the provider, the possibility of scaling and the great flexibility in process automation tasks, in addition, the costs of maintaining hardware and facilities, including their administration, are transferred to Cloud Computing providers (as well as some associated risks are shared) being a great attraction for companies where their business unit has no direct relationship with technology. In security matters, the Shared Responsibility Model is applied between the cloud service provider and the client, the provider is in charge of the control and administration of the components of the host system, virtualization and the security of access to physical resources in its facilities, the client assumes responsibilities for the management of operating systems, updates, the additional software used, the configuration of the firewall and the development of its applications in a secure manner. Additionally, when developing applications that handle financial transactions and sensitive information of users, the client must comply with the guarantees of the treatment of the personal data of its users, as well as the general security of its infrastructure to guarantee business continuity. Based on the above, the project intends to determine a strategy for the assurance of the CARGAYAPP application, focused on improving the logistics and cargo and transportation sector, developed by the company Colombian Technology Group SAS, providing the necessary compliance in the security of your financial transactions, as well as the protection of your customers' data. To achieve these objectives, an internal and external analysis of the company must be carried out, analyze the risks of the project and carry out an evaluation of the viability for the company, as well as define the strategic plan according to the results of the security analysis to be carried out. in each of the components of the application and finally the evaluation of the application of this plan.