C entro de

$xR(GLFLyQ1ž
CONTENIDO
9LUXV6<6,'
9LUXV SURYHQLHQWH GH
,QWHUQHW PHGLDQWH FRUUHR
HOHFWUyQLFR 6H DFWLYD
FXDQGR HO DUFKLYR DGMXQWR
DO FRUUHR HV HMHFXWDGR R
DELHUWR
5HFRPHQGDFLRQHV
*HQHUDOHV
1. VIRUS SYSID
CARACTERISTICAS
(V XQ YLUXV GH OD FDWHJRUtD ³JXVDQR´ GHQRPLQDGR DVt SRU VX IRUPD UiSLGD GH
UHSURGXFFLyQHVXQDUFKLYRFRQH[WHQVLyQ(;(
*HQHUDOHPHQWH VH WUDQVPLWH PHGLDQWH HO FRUUHR HOHFWUyQLFR SURFHGHQWH GH XQ
UHPLWHQWHFRQRFLGR$FRQWLQXDFLyQVHSUHVHQWDQFXDOTXLHUDGHORVFLHQQRPEUHV
'6H[H
7HFKH[H
IL[H[H
$FNQRZOHGJPHQWVH[H
$FWLRQH[H
$SSOHH[H
%DG%R\H[H
%DG*LUOH[H
%DOO*DPHH[H
%RRNH[H
%RVV*DPHH[H
%R\DQG*LUOH[H
&DUH[H
&HOO3KRQHH[H
&KHDWH[H
&KRRVH*DPHVH[H
&OLFN0HH[H
&RORUH[H
&RORUB-RNHH[H
'HVNB'HPRH[H
'LVSOD\H[H
'RQRWRYHUWLPHH[H
(DV\*DPHH[H
)UHHG0DQH[H
)73B3URH[H
*DPHH[H
*DPHH[H
*DPH6W\OHH[H
*KRVWH[H
*LUOH[H
*LUO*DPHH[H
*RRG$UWH[H
*RRG-REH[H
*RRG*DPHH[H
*UDSKLFVH[H
+$+$H[H
+DSS\1HZ<HDUH[H
+DSS\H[H
+HOS<RXUVHOIH[H
+RZ$UH<RXH[H
+XUU\8SH[H
,VVXHV)RU7RGD\H[H
-RNHH[H
-RQQ\H[H
.H\8VHUH[H
/LIH&\FOHVH[H
/LIH6W\OHVH[H
0$&H[H
0DNH0RUH0RQH\H[H
0DUNHWH[H
0D]H*DPHH[H
0D]H*DPHH[H
0HHWLQJH[H
0HUU\H[H
0LONH[H
0RXVHH[H
037RROVH[H
0S3OD\HUH[H
0XVLFH[H
?03H[H
0\)DWKHUH[H
0\/HWWHUH[H
0\0RWKHUH[H
0\3LFWXUHH[H
0\5HVXPHH[H
0\6LVWHUH[H
0\5HVXPHH[H
1HZ&KDQFHH[H
1HZ-REH[H
1HZ-RNHH[H
1HZ/DQJXDJHH[H
1HZ3URGXFW6KRZH[H
1HZ6\VWHPH[H
1HZVH[H
2IILFHIL[H[H
2VFDUH[H
3FFH[H
SGGH[H
3HQ+RXVHH[H
3KRQHH[H
3OD\%R\H[H
4XHVWLRQH[H
6FUHHQ6DYHUH[H
6H[3LFWXUHH[H
6RPHWLPHVH[H
6RXUFHH[H
6WRFN1HZVH[H
6XPPDU\H[H
7DNHD5HVWH[H
7DNH(DV\H[H
7DSHH[H
7KH+DSS\3ULQFHH[H
7KH6WDU&KLOGH[H
7KH<RXQJ.LQJH[H
7RROVH[H
7UXHRU)DOVHH[H
:LQ$PSH[H
:LQGRZH[H
:LQ=LSH[H
:::H[H
/RV FRUUHRV HOHFWUyQLFRV SRUWDGRUHV GH pVWH YLUXV
FRQWLHQHQ DUFKLYRV DGMXQWRV R DWDFKDGRV WUHV FRQ
H[WHQVLyQ '2& -3(* R ;/6 \ HO DUFKLYR
LQIHFWDGR(;(
/D ILJXUD TXH VH PXHVWUD HQ HO ODGR L]TXLHUGR HV XQ
FRUUHRLQIHFWDGRFRQHOYLUXV6<6,'
3iJ
&XDQGR HMHFXWH HO DUFKLYR TXH HVWi LQIHFWDGR PXHVWUD OD VLJXLHQWH YHQWDQD HQ OD SDQWDOOD GH OD
FRPSXWDGRUD
2EVHUYH OD ILJXUD TXH VH HQFXHQWUD DO ODGR GHUHFKR PXHVWUD GRV
RSFLRQHV*LUO\%R\SDUDHOHJLUHOVH[RGHODSHUVRQDTXHHMHFXWDOD
DSOLFDFLyQ\XQERWyQSDUDVDOLURFHUUDUODPLVPD(;,7
(V XQ SURJUDPD HVFULWR HQ FRGLILFDFLyQ FKLQD WUDGLFLRQDO FX\R
SURSyVLWR HV GLVWUDHU OD DWHQFLyQ GH ORV GHVWLQDWDULRV GHO YLUXV
6\VLGPLHQWUDVHOJXVDQRVHYDLQVWDODQGRHQHOVLVWHPDRSHUDWLYR
:LQGRZV17
/R QRYHGRVR GH pVWH YLUXV HV HVFRQGHU WRGR LQGLFLR GH VX
SUHVHQFLD DO PRPHQWR GH VHUH[DPLQDGR SRU HO XVXDULR R SRU DOJ~Q
SURGXFWRDQWLYLUXV
6H XELFD HQ OD PHPRULD DVHJXUiQGRVH TXH QR SXHGH VHU
GHVFXELHUWRQLGHVDFWLYDGR
&RPSOHWDGR HO SURFHVR GH LQIHFFLyQ HO YLUXV 6\VLG VH H[SDQGH D RWURV XVXDULRV D WUDYpV GHO FRUUHR
HOHFWUyQLFR HQYLiQGROHV GH IRUPD DXWRPiWLFD VLQ HO SHUPLVR GHO XVXDULR D ORV FRUUHRV GH OD OLEUHWD GH
GLUHFFLRQHVGHOXVXDULRDIHFWDGR
EFECTOS DEL VIRUS SYSID
(O YLUXV FRSLD HO DUFKLYR ³6<6,'(;(´ HQ ORV VLJXLHQWH GLUHFWRULRV F?ZLQGRZV? F?ZLQGRZV?V\VWHP?
F?ZLQQW?F?ZLQQW?V\VWHP?$GHPiVFUHDHOUHJLVWUR+./0?6RIWZDUH?0LFURVRIW?:LQGRZV?&XUUHQW9HUVLRQ?
5XQ:LQGRZV9HUVLRQ V\VLGFRQHOILQGHDFWLYDUVHFDGDYH]TXHVHFLHUUDODVHVLyQGH:LQGRZVOXHJR
ERUUDHOUHJLVWURFUHDGRWDQSURQWRVHHMHFXWH:LQGRZV
3RU ~OWLPR FUHD HO GLUHFWRULR :,19(59%6 FX\D IXQFLyQ FRQVLVWH HQ REWHQHU GH IRUPD DOHDWRULD ODV
GLUHFFLRQHVGHFRUUHRVGHODOLEUHWDGHGLUHFFLRQHVGHOXVXDULRDIHFWDGRSDUDHQYLDUOHVHODUFKLYRLQIHFWDGR
2. Recomendaciones Generales para la Seguridad de la
Información
'HVFRQILDUGHWRGRDUFKLYRDGMXQWRQRVROLFLWDGRDXQVLHOUHPLWHQWH
GHOPHQVDMHSRUWDGRUHVXQXVXDULRGHFRQILDQ]D
(VQHFHVDULRWHQHUHQFXHQWDODVVLJXLHQWHVUHFRPHQGDFLRQHVTXHEULQGDPRVHQHVWHEROHWtQHOXVXDULRGH
FRPSXWDGRUDVQRSXHGHGHWHUPLQDUFXDQGRYDDVHUDWDFDGRSRUXQDDPHQD]DGHLQWHUQHWRYtULFD&RPR
UHFRPHQGDFLyQSULQFLSDO\PiVLPSRUWDQWHSRGHPRVPHQFLRQDUODXWLOL]DFLyQGHXQDQWLYLUXVDFWXDOL]DGR
&255(2(/(&7521,&2
x /RV DUFKLYRV TXH VH HQYtHQ SRU HO FRUUHR
LQVWLWXFLRQDOGHEHVHUUHYLVDGRSUHYLDPHQWHSRU
HODQWLYLUXV
x (O $GPLQLVWUDGRU GH &RUUHR GHEH PRQLWRUHDU
ORVPHQVDMHVTXHLQJUHVDQ\6DOHQGHO6HUYLGRU
GH &RUUHR GH PRGR TXH ORV YLUXV VHDQ
GHWHFWDGRV\HOLPLQDGRVHQIRUPDDXWRPiWLFD
',6.(77(5$6
x 1R DEULU ORV DUFKLYRV TXH QR KD\DQ VLGR
VROLFLWDGRV SRU HO XVXDULR \ TXH WHQJDQ XQ
DUFKLYRDGMXQWR
x 7RGRVORVDUFKLYRVDGMXQWRVTXHOOHJXHQHQORV
FRUUHRVWLHQHQTXHSDVDUSRUHO$QWLYLUXV
x /RV XVXDULRV WLHQHQ FRUUHRV HOHFWUyQLFRV QR
LQVWLWXFLRQDOHV QR GHEHQ EDMDU DUFKLYRV
DGMXQWRV DO GLVFR GXUR GH OD FRPSXWDGRUD TXH
WLHQHQ
D
VX
FDUJR
3iJ
x 1RXWLOLFHGLVNHWWHVSURYHQLHQWHVGHOH[WHULRUVLQ
DQWHVSDVDUSRUHO$QWLYLUXV
x (O SHUVRQDO FRQ DFFHVR PRQRXVXDULR GHEH
KDFHUXQFRQWUROSHUPDQHQWH SDUD OD GHWHFFLyQ
\HOLPLQDFLyQGHYLUXVHQORVGLVNHWWHV
5(',167,78&,21$/
6LWUDEDMDHQXQDUHGLQVWLWXFLRQDO HVQHFHVDULR
WRPDU SUHFDXFLRQHV \D TXH HO LQWHUFDPELR GH
LQIRUPDFLyQ HV SHUPDQHQWH (V LPSRUWDQWH TXH
FDGD XVXDULR WRPH FRQFLHQFLD GH OD LQIRUPDFLyQ
TXHVHSDVDRWUDQVILHUHPHGLDQWHODUHG
x 1REDMHQLQJ~QVRIWZDUHRDUFKLYRVGHLQWHUQHW
VLQVHUUHYLVDGRVSUHYLDPHQWHSRUHODQWLYLUXVR
HOILUHZDOO
x /RV DUFKLYRV FRQ H[WHQVLRQHV H[H FRP
MSJ YEV HV QHFHVDULR TXH VLHPSUH SDVH HO
DQWLYLUXVLQVWDODGRHQOD3&GHOXVXDULR
x (O
$QWLYLUXV
GHEH
VHU
DFWXDOL]DGR
SHUPDQHQWHPHQWH TXLQFHQDO R PHQVXDOPHQWH
GHSHQGLHQGRGHOPLVPR
x &XDQGR FRPSDUWH XQ DUFKLYR HQ OD UHG WLHQH
TXHVHUUHYLVDGRSRUHODQWLYLUXV
x (IHFW~H PHQVXDOPHQWH XQ UHVSDOGR GH OD
LQIRUPDFLyQ PiV LPSRUWDQWH HQ WRGDV ODV 3&¶V
GHOD,QVWLWXFLyQ
x &RPSUREDU OD ILDELOLGDG GH OD IXHQWH GH ORV
VRIWZDUH HVWR LPSOLFD HQ QR DFHSWDU XQ
VRIWZDUHTXHQRVHDRULJLQDO\DTXHODSLUDWHUtD
x (VSUHIHULEOHTXHODVFRPSXWDGRUDVFRQHFWDGDV
DUHGQRWHQJDGLVNHWWHUDVDILQGHSUHYHQLUOD
LQIHFFLyQGHYLUXVLQIRUPiWLFRV
x 7RGRV ORV GLVNHWWHV TXH LQJUHVHQ D OD
FRPSXWDGRUD GHEHQ HVWDU SURWHJLGR FRQWUD
HVFULWXUD SDUD HYLWDU SRVLEOHV LQIHFFLRQHV DO
PRPHQWRGHOHFWXUD
HV XQD GH ODV SULQFLSDOHV IXHQWHV GH FRQWDJLR
GHXQYLUXV
x (O6LVWHPD2SHUDWLYRHVORPiVLPSRUWDQWHTXH
WLHQH OD FRPSXWDGRUD GHEH VHU WRWDOPHQWH
ILDEOH 6L HO 62 VH HQFXHQWUD LQIHFWDGR
FXDOTXLHU SURJUDPD TXH HMHFXWH UHVXOWDUi
WDPELpQFRQWDPLQDGR
x 1R DxDGD DUFKLYRV GH GDWRV R SURJUDPDV D
GLVNHWWHVTXHFRQWLHQHQSURJUDPDVRULJLQDOHV
x (IHFW~H SHULyGLFDPHQWH OD GHSXUDFLyQ GH
DUFKLYRVTXHWHQJDODFRPSXWDGRUD
x $FWXDOL]DU ODV YHUVLRQHV GH ORV SURJUDPDV
QDYHJDGRUHV([SORUHU1HWVFDSH2SHUDHQWUH
RWURV \D TXH FRQ ODV DFWXDOL]DFLRQHV VH
LQFRUSRUDQDOJXQDVPHGLGDVGHVHJXULGDG
x $FWLYDU HQ ORV QDYHJDGRUHV ODV RSFLRQHV TXH
DOHUWHQ VREUH HO LQWHUFDPELR GH GDWRV QR
GHVHDGRV
x 1R OOHQH GDWRV TXH QR GHVHH KDFHU S~EOLFRV
SRU HMHPSOR GLUHFFLyQ GH FRUUHR HOHFWUyQLFR
QRPEUH
DSHOOLGRV
WHOpIRQR
HWF
3iJ