01. Universidade Federal Rural de Pernambuco - UFRPE (Sede)

URI permanente desta comunidadehttps://arandu.ufrpe.br/handle/123456789/1

Navegar

Resultados da Pesquisa

Agora exibindo 1 - 3 de 3
  • Imagem de Miniatura
    Item
    Utilização de inteligência de ameaças cibernéticas para prevenção e mitigação de ataques ransomware: uma revisão sistemática da literatura
    (2025-02-27) Cabral, Rennan Luis Barros; Lins, Fernando Antonio Aires; http://lattes.cnpq.br/2475965771605110; http://lattes.cnpq.br/4612932794474682
  • Imagem de Miniatura
    Item
    Security evaluation of operating systems considering compliance policies
    (2021-03-01) Teixeira, Vanessa Bandeira Lins; Lins, Fernando Antonio Aires; Nóbrega, Obionor de Oliveira; http://lattes.cnpq.br/8576087238071129; http://lattes.cnpq.br/2475965771605110; http://lattes.cnpq.br/9351392044969981
    Currently, to search, mitigate and solve security vulnerabilities is considered a relevant and complex task. New software are being developed everyday, and each one of them may bring its own vulnerabilities. In addition, the configurations of these applications can also increase these vulnerabilities. In this context, there is a lack of securityoriented configurations in a significant part of the current operating systems. These assets, which are usually not properly configured considering security requirements, become easy targets for a considered number of security attacks. The application of compliance policies in an operating system helps to preserve the environment from malicious exploitation. The main objective of this work is to evaluate the use of compliance policies to assess and improve the security level of operating systems. To achieve this, a methodology is proposed and described. This methodology is also applied to a case study with server operating systems. For this purpose, faults in the factory configuration of the operating systems were considered, which were identified using the Center for Internet Security (CIS) compliance policies. Thus, it became possible to evaluate the system security level and to classify the main recommendations for prioritizing the corrections that users can follow. Such recommendations aim to reduce the attacks surface on systems and increase the security level by mitigating the vulnerabilities to which the systems are exposed.
  • Imagem de Miniatura
    Item
    Desenvolvimento de uma artefato para aprendizado sobre segurança da informação em APIs
    (2023-05-15) Castro, Ricardo Henrique Rodrigues de; Assad, Rodrigo Elia; http://lattes.cnpq.br/3791808485485116
    In today’s world, Application Programming Interfaces (APIs) play a crucial role in applications by enabling integration between different systems. However, due to the sensitivity of the data and personal information that APIs handle, they are often targeted by malicious actors. To assist developers and security analysts, the Open Web Application Security Project (OWASP) has published a list of the top ten most common API security problems, aiming to identify and provide guidance on resolving them. In this context, this article proposes an innovative approach to learning security in APIs, utilizing the problem-based learning method known as Problem-Based Learning (PBL). This approach will actively engage students in solving real challenges related to API security, exposing them to authentic problems and developing practical skills in analysis, vulnerability identification, and countermeasure application.