$xR(GLFLyQ1 CONTENIDO 9LUXV6<6,' 9LUXV SURYHQLHQWH GH ,QWHUQHW PHGLDQWH FRUUHR HOHFWUyQLFR 6H DFWLYD FXDQGR HO DUFKLYR DGMXQWR DO FRUUHR HV HMHFXWDGR R DELHUWR 5HFRPHQGDFLRQHV *HQHUDOHV 1. VIRUS SYSID CARACTERISTICAS (V XQ YLUXV GH OD FDWHJRUtD ³JXVDQR´ GHQRPLQDGR DVt SRU VX IRUPD UiSLGD GH UHSURGXFFLyQHVXQDUFKLYRFRQH[WHQVLyQ(;( *HQHUDOHPHQWH VH WUDQVPLWH PHGLDQWH HO FRUUHR HOHFWUyQLFR SURFHGHQWH GH XQ UHPLWHQWHFRQRFLGR$FRQWLQXDFLyQVHSUHVHQWDQFXDOTXLHUDGHORVFLHQQRPEUHV '6H[H 7HFKH[H IL[H[H $FNQRZOHGJPHQWVH[H $FWLRQH[H $SSOHH[H %DG%R\H[H %DG*LUOH[H %DOO*DPHH[H %RRNH[H %RVV*DPHH[H %R\DQG*LUOH[H &DUH[H &HOO3KRQHH[H &KHDWH[H &KRRVH*DPHVH[H &OLFN0HH[H &RORUH[H &RORUB-RNHH[H 'HVNB'HPRH[H 'LVSOD\H[H 'RQRWRYHUWLPHH[H (DV\*DPHH[H )UHHG0DQH[H )73B3URH[H *DPHH[H *DPHH[H *DPH6W\OHH[H *KRVWH[H *LUOH[H *LUO*DPHH[H *RRG$UWH[H *RRG-REH[H *RRG*DPHH[H *UDSKLFVH[H +$+$H[H +DSS\1HZ<HDUH[H +DSS\H[H +HOS<RXUVHOIH[H +RZ$UH<RXH[H +XUU\8SH[H ,VVXHV)RU7RGD\H[H -RNHH[H -RQQ\H[H .H\8VHUH[H /LIH&\FOHVH[H /LIH6W\OHVH[H 0$&H[H 0DNH0RUH0RQH\H[H 0DUNHWH[H 0D]H*DPHH[H 0D]H*DPHH[H 0HHWLQJH[H 0HUU\H[H 0LONH[H 0RXVHH[H 037RROVH[H 0S3OD\HUH[H 0XVLFH[H ?03H[H 0\)DWKHUH[H 0\/HWWHUH[H 0\0RWKHUH[H 0\3LFWXUHH[H 0\5HVXPHH[H 0\6LVWHUH[H 0\5HVXPHH[H 1HZ&KDQFHH[H 1HZ-REH[H 1HZ-RNHH[H 1HZ/DQJXDJHH[H 1HZ3URGXFW6KRZH[H 1HZ6\VWHPH[H 1HZVH[H 2IILFHIL[H[H 2VFDUH[H 3FFH[H SGGH[H 3HQ+RXVHH[H 3KRQHH[H 3OD\%R\H[H 4XHVWLRQH[H 6FUHHQ6DYHUH[H 6H[3LFWXUHH[H 6RPHWLPHVH[H 6RXUFHH[H 6WRFN1HZVH[H 6XPPDU\H[H 7DNHD5HVWH[H 7DNH(DV\H[H 7DSHH[H 7KH+DSS\3ULQFHH[H 7KH6WDU&KLOGH[H 7KH<RXQJ.LQJH[H 7RROVH[H 7UXHRU)DOVHH[H :LQ$PSH[H :LQGRZH[H :LQ=LSH[H :::H[H /RV FRUUHRV HOHFWUyQLFRV SRUWDGRUHV GH pVWH YLUXV FRQWLHQHQ DUFKLYRV DGMXQWRV R DWDFKDGRV WUHV FRQ H[WHQVLyQ '2& -3(* R ;/6 \ HO DUFKLYR LQIHFWDGR(;( /D ILJXUD TXH VH PXHVWUD HQ HO ODGR L]TXLHUGR HV XQ FRUUHRLQIHFWDGRFRQHOYLUXV6<6,' 3iJ &XDQGR HMHFXWH HO DUFKLYR TXH HVWi LQIHFWDGR PXHVWUD OD VLJXLHQWH YHQWDQD HQ OD SDQWDOOD GH OD FRPSXWDGRUD 2EVHUYH OD ILJXUD TXH VH HQFXHQWUD DO ODGR GHUHFKR PXHVWUD GRV RSFLRQHV*LUO\%R\SDUDHOHJLUHOVH[RGHODSHUVRQDTXHHMHFXWDOD DSOLFDFLyQ\XQERWyQSDUDVDOLURFHUUDUODPLVPD(;,7 (V XQ SURJUDPD HVFULWR HQ FRGLILFDFLyQ FKLQD WUDGLFLRQDO FX\R SURSyVLWR HV GLVWUDHU OD DWHQFLyQ GH ORV GHVWLQDWDULRV GHO YLUXV 6\VLGPLHQWUDVHOJXVDQRVHYDLQVWDODQGRHQHOVLVWHPDRSHUDWLYR :LQGRZV17 /R QRYHGRVR GH pVWH YLUXV HV HVFRQGHU WRGR LQGLFLR GH VX SUHVHQFLD DO PRPHQWR GH VHUH[DPLQDGR SRU HO XVXDULR R SRU DOJ~Q SURGXFWRDQWLYLUXV 6H XELFD HQ OD PHPRULD DVHJXUiQGRVH TXH QR SXHGH VHU GHVFXELHUWRQLGHVDFWLYDGR &RPSOHWDGR HO SURFHVR GH LQIHFFLyQ HO YLUXV 6\VLG VH H[SDQGH D RWURV XVXDULRV D WUDYpV GHO FRUUHR HOHFWUyQLFR HQYLiQGROHV GH IRUPD DXWRPiWLFD VLQ HO SHUPLVR GHO XVXDULR D ORV FRUUHRV GH OD OLEUHWD GH GLUHFFLRQHVGHOXVXDULRDIHFWDGR EFECTOS DEL VIRUS SYSID (O YLUXV FRSLD HO DUFKLYR ³6<6,'(;(´ HQ ORV VLJXLHQWH GLUHFWRULRV F?ZLQGRZV? F?ZLQGRZV?V\VWHP? F?ZLQQW?F?ZLQQW?V\VWHP?$GHPiVFUHDHOUHJLVWUR+./0?6RIWZDUH?0LFURVRIW?:LQGRZV?&XUUHQW9HUVLRQ? 5XQ:LQGRZV9HUVLRQ V\VLGFRQHOILQGHDFWLYDUVHFDGDYH]TXHVHFLHUUDODVHVLyQGH:LQGRZVOXHJR ERUUDHOUHJLVWURFUHDGRWDQSURQWRVHHMHFXWH:LQGRZV 3RU ~OWLPR FUHD HO GLUHFWRULR :,19(59%6 FX\D IXQFLyQ FRQVLVWH HQ REWHQHU GH IRUPD DOHDWRULD ODV GLUHFFLRQHVGHFRUUHRVGHODOLEUHWDGHGLUHFFLRQHVGHOXVXDULRDIHFWDGRSDUDHQYLDUOHVHODUFKLYRLQIHFWDGR 2. Recomendaciones Generales para la Seguridad de la Información 'HVFRQILDUGHWRGRDUFKLYRDGMXQWRQRVROLFLWDGRDXQVLHOUHPLWHQWH GHOPHQVDMHSRUWDGRUHVXQXVXDULRGHFRQILDQ]D (VQHFHVDULRWHQHUHQFXHQWDODVVLJXLHQWHVUHFRPHQGDFLRQHVTXHEULQGDPRVHQHVWHEROHWtQHOXVXDULRGH FRPSXWDGRUDVQRSXHGHGHWHUPLQDUFXDQGRYDDVHUDWDFDGRSRUXQDDPHQD]DGHLQWHUQHWRYtULFD&RPR UHFRPHQGDFLyQSULQFLSDO\PiVLPSRUWDQWHSRGHPRVPHQFLRQDUODXWLOL]DFLyQGHXQDQWLYLUXVDFWXDOL]DGR &255(2(/(&7521,&2 x /RV DUFKLYRV TXH VH HQYtHQ SRU HO FRUUHR LQVWLWXFLRQDOGHEHVHUUHYLVDGRSUHYLDPHQWHSRU HODQWLYLUXV x (O $GPLQLVWUDGRU GH &RUUHR GHEH PRQLWRUHDU ORVPHQVDMHVTXHLQJUHVDQ\6DOHQGHO6HUYLGRU GH &RUUHR GH PRGR TXH ORV YLUXV VHDQ GHWHFWDGRV\HOLPLQDGRVHQIRUPDDXWRPiWLFD ',6.(77(5$6 x 1R DEULU ORV DUFKLYRV TXH QR KD\DQ VLGR VROLFLWDGRV SRU HO XVXDULR \ TXH WHQJDQ XQ DUFKLYRDGMXQWR x 7RGRVORVDUFKLYRVDGMXQWRVTXHOOHJXHQHQORV FRUUHRVWLHQHQTXHSDVDUSRUHO$QWLYLUXV x /RV XVXDULRV WLHQHQ FRUUHRV HOHFWUyQLFRV QR LQVWLWXFLRQDOHV QR GHEHQ EDMDU DUFKLYRV DGMXQWRV DO GLVFR GXUR GH OD FRPSXWDGRUD TXH WLHQHQ D VX FDUJR 3iJ x 1RXWLOLFHGLVNHWWHVSURYHQLHQWHVGHOH[WHULRUVLQ DQWHVSDVDUSRUHO$QWLYLUXV x (O SHUVRQDO FRQ DFFHVR PRQRXVXDULR GHEH KDFHUXQFRQWUROSHUPDQHQWH SDUD OD GHWHFFLyQ \HOLPLQDFLyQGHYLUXVHQORVGLVNHWWHV 5(',167,78&,21$/ 6LWUDEDMDHQXQDUHGLQVWLWXFLRQDO HVQHFHVDULR WRPDU SUHFDXFLRQHV \D TXH HO LQWHUFDPELR GH LQIRUPDFLyQ HV SHUPDQHQWH (V LPSRUWDQWH TXH FDGD XVXDULR WRPH FRQFLHQFLD GH OD LQIRUPDFLyQ TXHVHSDVDRWUDQVILHUHPHGLDQWHODUHG x 1REDMHQLQJ~QVRIWZDUHRDUFKLYRVGHLQWHUQHW VLQVHUUHYLVDGRVSUHYLDPHQWHSRUHODQWLYLUXVR HOILUHZDOO x /RV DUFKLYRV FRQ H[WHQVLRQHV H[H FRP MSJ YEV HV QHFHVDULR TXH VLHPSUH SDVH HO DQWLYLUXVLQVWDODGRHQOD3&GHOXVXDULR x (O $QWLYLUXV GHEH VHU DFWXDOL]DGR SHUPDQHQWHPHQWH TXLQFHQDO R PHQVXDOPHQWH GHSHQGLHQGRGHOPLVPR x &XDQGR FRPSDUWH XQ DUFKLYR HQ OD UHG WLHQH TXHVHUUHYLVDGRSRUHODQWLYLUXV x (IHFW~H PHQVXDOPHQWH XQ UHVSDOGR GH OD LQIRUPDFLyQ PiV LPSRUWDQWH HQ WRGDV ODV 3&¶V GHOD,QVWLWXFLyQ x &RPSUREDU OD ILDELOLGDG GH OD IXHQWH GH ORV VRIWZDUH HVWR LPSOLFD HQ QR DFHSWDU XQ VRIWZDUHTXHQRVHDRULJLQDO\DTXHODSLUDWHUtD x (VSUHIHULEOHTXHODVFRPSXWDGRUDVFRQHFWDGDV DUHGQRWHQJDGLVNHWWHUDVDILQGHSUHYHQLUOD LQIHFFLyQGHYLUXVLQIRUPiWLFRV x 7RGRV ORV GLVNHWWHV TXH LQJUHVHQ D OD FRPSXWDGRUD GHEHQ HVWDU SURWHJLGR FRQWUD HVFULWXUD SDUD HYLWDU SRVLEOHV LQIHFFLRQHV DO PRPHQWRGHOHFWXUD HV XQD GH ODV SULQFLSDOHV IXHQWHV GH FRQWDJLR GHXQYLUXV x (O6LVWHPD2SHUDWLYRHVORPiVLPSRUWDQWHTXH WLHQH OD FRPSXWDGRUD GHEH VHU WRWDOPHQWH ILDEOH 6L HO 62 VH HQFXHQWUD LQIHFWDGR FXDOTXLHU SURJUDPD TXH HMHFXWH UHVXOWDUi WDPELpQFRQWDPLQDGR x 1R DxDGD DUFKLYRV GH GDWRV R SURJUDPDV D GLVNHWWHVTXHFRQWLHQHQSURJUDPDVRULJLQDOHV x (IHFW~H SHULyGLFDPHQWH OD GHSXUDFLyQ GH DUFKLYRVTXHWHQJDODFRPSXWDGRUD x $FWXDOL]DU ODV YHUVLRQHV GH ORV SURJUDPDV QDYHJDGRUHV([SORUHU1HWVFDSH2SHUDHQWUH RWURV \D TXH FRQ ODV DFWXDOL]DFLRQHV VH LQFRUSRUDQDOJXQDVPHGLGDVGHVHJXULGDG x $FWLYDU HQ ORV QDYHJDGRUHV ODV RSFLRQHV TXH DOHUWHQ VREUH HO LQWHUFDPELR GH GDWRV QR GHVHDGRV x 1R OOHQH GDWRV TXH QR GHVHH KDFHU S~EOLFRV SRU HMHPSOR GLUHFFLyQ GH FRUUHR HOHFWUyQLFR QRPEUH DSHOOLGRV WHOpIRQR HWF 3iJ