<?xml version="1.0" encoding="ISO-8859-1"?><article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<front>
<journal-meta>
<journal-id>2215-2652</journal-id>
<journal-title><![CDATA[Ingeniería]]></journal-title>
<abbrev-journal-title><![CDATA[Ingeniería]]></abbrev-journal-title>
<issn>2215-2652</issn>
<publisher>
<publisher-name><![CDATA[Universidad de Costa Rica]]></publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id>S2215-26522025000100011</article-id>
<article-id pub-id-type="doi">10.15517/ri.v35i1.60075</article-id>
<title-group>
<article-title xml:lang="es"><![CDATA[A comprehensive analysis of cybersecurity infrastructure in academic Environments]]></article-title>
<article-title xml:lang="en"><![CDATA[Un análisis integral de la infraestructura de ciberseguridad en ambientes académicos]]></article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Santillán]]></surname>
<given-names><![CDATA[Holger]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
<xref ref-type="aff" rid="Aaf"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Arévalo Satán]]></surname>
<given-names><![CDATA[Julio Andrés]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Wong]]></surname>
<given-names><![CDATA[Peregrina]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
</contrib-group>
<aff id="Af1">
<institution><![CDATA[,Universidad Politécnica Salesiana  ]]></institution>
<addr-line><![CDATA[ ]]></addr-line>
<country>Ecuador</country>
</aff>
<aff id="Af4">
<institution><![CDATA[,Universidad de las Palmas de Gran Canaria  ]]></institution>
<addr-line><![CDATA[ ]]></addr-line>
<country>España</country>
</aff>
<aff id="Af2">
<institution><![CDATA[,Universidad Politécnica Salesiana  ]]></institution>
<addr-line><![CDATA[ ]]></addr-line>
<country>Ecuador</country>
</aff>
<aff id="Af3">
<institution><![CDATA[,Universidad de las Palmas de Gran Canaria  ]]></institution>
<addr-line><![CDATA[ ]]></addr-line>
<country>España</country>
</aff>
<pub-date pub-type="pub">
<day>00</day>
<month>06</month>
<year>2025</year>
</pub-date>
<pub-date pub-type="epub">
<day>00</day>
<month>06</month>
<year>2025</year>
</pub-date>
<volume>35</volume>
<numero>1</numero>
<fpage>11</fpage>
<lpage>23</lpage>
<copyright-statement/>
<copyright-year/>
<self-uri xlink:href="http://www.scielo.sa.cr/scielo.php?script=sci_arttext&amp;pid=S2215-26522025000100011&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.sa.cr/scielo.php?script=sci_abstract&amp;pid=S2215-26522025000100011&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.sa.cr/scielo.php?script=sci_pdf&amp;pid=S2215-26522025000100011&amp;lng=en&amp;nrm=iso"></self-uri><abstract abstract-type="short" xml:lang="es"><p><![CDATA[Abstract This paper addresses a comprehensive analysis of cybersecurity systems in academic environments taking as a case study the domains: ''www.ups.edu.ec'', ''cas.ups.edu.ec'', ''virtual.ups.edu.ec'' y ''dspace.ups.edu.ec'', of the Salesian Polytechnic University, using specialized tools such as Kali Linux and Nessus. Through these technologies, critical aspects of the system's security are evaluated: its ability to resist attacks, how effective its defense mechanisms are, and its capacity to identify exploitable weak points. A novel methodology is applied to evaluate the security of the system, using emerging technologies and innovative techniques. During the research, several vulnerabilities were identified covering the four studied domains. These were classified using the CVSS (Common Vulnerability Scoring System) rating protocol, which allowed the most critical ones to be prioritized and addressed first. In addition, a scan of open ports was performed to recognize possible unauthorized access points. As part of the security testing, a simulation of an email phishing attack was carried out by cloning the Salesian University access website, in order to assess users' susceptibility to this threat. Domain security analysis revealed critical vulnerabilities, including an outdated version of PHP and possible remote code execution (CVSS 9.8-10) in ''virtual.ups.edu.ec''. SSL/TLS security issues were also detected, such as the use of weak ciphers and outdated versions of TLS (CVSS up to 7.5). In addition, medium risks related to lack of HSTS and vulnerabilities in PHP and jQuery were found, along with weaker SSH configurations of lesser impact (CVSS 2.6-3.7). These results show the need for security updates and improvements.]]></p></abstract>
<abstract abstract-type="short" xml:lang="en"><p><![CDATA[Resumen This paper addresses a comprehensive analysis of cybersecurity systems in academic environments taking as a case study the domains: ''www.ups.edu.ec'', ''cas.ups.edu.ec'', ''virtual.ups.edu.ec'' y ''dspace.ups.edu.ec'', of the Salesian Polytechnic University, using specialized tools such as Kali Linux and Nessus. Through these technologies, critical aspects of the system's security are evaluated: its ability to resist attacks, how effective its defense mechanisms are, and its capacity to identify exploitable weak points. A novel methodology is applied to evaluate the security of the system, using emerging technologies and innovative techniques. During the research, several vulnerabilities were identified covering the four studied domains. These were classified using the CVSS (Common Vulnerability Scoring System) rating protocol, which allowed the most critical ones to be prioritized and addressed first. In addition, a scan of open ports was performed to recognize possible unauthorized access points. As part of the security testing, a simulation of an email phishing attack was carried out by cloning the Salesian University access website, in order to assess users' susceptibility to this threat. Domain security analysis revealed critical vulnerabilities, including an outdated version of PHP and possible remote code execution (CVSS 9.8-10) in ''virtual.ups.edu.ec''. SSL/TLS security issues were also detected, such as the use of weak ciphers and outdated versions of TLS (CVSS up to 7.5). In addition, medium risks related to lack of HSTS and vulnerabilities in PHP and jQuery were found, along with weaker SSH configurations of lesser impact (CVSS 2.6-3.7). These results show the need for security updates and improvements.]]></p></abstract>
<kwd-group>
<kwd lng="es"><![CDATA[Kali Linux]]></kwd>
<kwd lng="es"><![CDATA[Nessus]]></kwd>
<kwd lng="es"><![CDATA[phishing]]></kwd>
<kwd lng="es"><![CDATA[seguridad cibernética]]></kwd>
<kwd lng="es"><![CDATA[vulnerabilidades]]></kwd>
<kwd lng="en"><![CDATA[Cybersecurity]]></kwd>
<kwd lng="en"><![CDATA[Kali Linux]]></kwd>
<kwd lng="en"><![CDATA[Nessus]]></kwd>
<kwd lng="en"><![CDATA[phishing]]></kwd>
<kwd lng="en"><![CDATA[vulnerabilities]]></kwd>
</kwd-group>
</article-meta>
</front><back>
<ref-list>
<ref id="B1">
<label>(1)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Tapiawala]]></surname>
<given-names><![CDATA[K. S.]]></given-names>
</name>
<name>
<surname><![CDATA[Wang]]></surname>
<given-names><![CDATA[X.]]></given-names>
</name>
</person-group>
<source><![CDATA[The 24th Annual Conference on Information Technology Education]]></source>
<year>2023</year>
<conf-name><![CDATA[ ''Knowledge Exploration: Teaching Cyber-Security Using Controlled Web-Based Laboratories,'']]></conf-name>
<conf-date>Oct.</conf-date>
<conf-loc>New York, NY, USA, </conf-loc>
<page-range>216-7</page-range></nlm-citation>
</ref>
<ref id="B2">
<label>(2)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Kumar]]></surname>
<given-names><![CDATA[J. R. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Bhalke]]></surname>
<given-names><![CDATA[D. G.]]></given-names>
</name>
<name>
<surname><![CDATA[Nikam]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Chobe]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Khidse]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Kale]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Evaluation of the extent and demanding roles of ethical hacking in cybersecurity,'']]></article-title>
<source><![CDATA[Journal of Autonomous Intelligence]]></source>
<year>2023</year>
<volume>7</volume>
<numero>1</numero>
<issue>1</issue>
<page-range>1-10</page-range></nlm-citation>
</ref>
<ref id="B3">
<label>(3)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Vlachos]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
<name>
<surname><![CDATA[Katsidimas]]></surname>
<given-names><![CDATA[I.]]></given-names>
</name>
<name>
<surname><![CDATA[Kerimakis]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
<name>
<surname><![CDATA[Nikoletseas]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Panagiotou]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Spirakis]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
</person-group>
<source><![CDATA[2021 29th Telecommunications Forum (TELFOR)]]></source>
<year>2021</year>
<conf-name><![CDATA[ ''ASPIDA: A client-oriented platform for assessing websites security practices adoption and reward,'']]></conf-name>
<conf-date>Nov.</conf-date>
<conf-loc>Belgrade, Serbia </conf-loc>
<page-range>1-4</page-range></nlm-citation>
</ref>
<ref id="B4">
<label>(4)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Aibekova]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Selvarajah]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
</person-group>
<source><![CDATA[2022 IEEE International Conference on Distributed Computing and Electrical Circuits and Electronics (ICDCECE)]]></source>
<year>2022</year>
<conf-name><![CDATA[ ''Offensive Security: Study on Penetration Testing Attacks, Methods, and their Types,'']]></conf-name>
<conf-loc>Ballari, India </conf-loc>
<page-range>1-9</page-range></nlm-citation>
</ref>
<ref id="B5">
<label>(5)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Liu]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Xue]]></surname>
<given-names><![CDATA[Z.]]></given-names>
</name>
<name>
<surname><![CDATA[Zhong]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Chen]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Host-Based Intrusion Detection System with System Calls,'']]></article-title>
<source><![CDATA[ACM Comput Surv]]></source>
<year>2019</year>
<volume>51</volume>
<numero>5</numero>
<issue>5</issue>
<page-range>1-36</page-range></nlm-citation>
</ref>
<ref id="B6">
<label>(6)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Vishnuram]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Tripathi]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Kumar Tyagi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[2022 International Conference on Computer Communication and Informatics (ICCCI)]]></source>
<year>2022</year>
<conf-name><![CDATA[ ''Ethical Hacking: Importance, Controversies and Scope in the Future,'']]></conf-name>
<conf-date>Jan. 2022</conf-date>
<conf-loc>Coimbatore, India, </conf-loc>
<page-range>01-6</page-range></nlm-citation>
</ref>
<ref id="B7">
<label>(7)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Nieto]]></surname>
<given-names><![CDATA[M. A. M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Web Service to Retrieve and Semantically Enrich Datasets for Theses From Open Educational Repositories,'']]></article-title>
<source><![CDATA[IEEE Access]]></source>
<year>2020</year>
<volume>8</volume>
<page-range>171933-44</page-range></nlm-citation>
</ref>
<ref id="B8">
<label>(8)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Gallo]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Gentile]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Ruggiero]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Botta]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Ventre]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''The human factor in phishing: Collecting and analyzing user behavior when reading emails,'']]></article-title>
<source><![CDATA[Comput. Secur.]]></source>
<year>2023</year>
<volume>139</volume>
<page-range>103671</page-range></nlm-citation>
</ref>
<ref id="B9">
<label>(9)</label><nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Zhang]]></surname>
<given-names><![CDATA[Y.]]></given-names>
</name>
</person-group>
<source><![CDATA[M.A. Thesis]]></source>
<year>2022</year>
<publisher-name><![CDATA[Simon Fraser Univ.]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B10">
<label>(10)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Sethuraman]]></surname>
<given-names><![CDATA[S. C.]]></given-names>
</name>
<name>
<surname><![CDATA[Reddi]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Reddy]]></surname>
<given-names><![CDATA[M. S. T.]]></given-names>
</name>
<name>
<surname><![CDATA[Khan]]></surname>
<given-names><![CDATA[M. K.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''A comprehensive examination of email spoofing: Issues and prospects for email security,'']]></article-title>
<source><![CDATA[Comput. Secur]]></source>
<year>2023</year>
<volume>137</volume>
<page-range>103600</page-range></nlm-citation>
</ref>
<ref id="B11">
<label>(11)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ahmetoglu]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Das,]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''A comprehensive review on detection of cyber-attacks: Data sets, methods, challenges, and future research directions,'']]></article-title>
<source><![CDATA[Internet of Things]]></source>
<year>2022</year>
<volume>20</volume>
<page-range>100615</page-range></nlm-citation>
</ref>
<ref id="B12">
<label>(12)</label><nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Jones]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[Senior Honors Thesis]]></source>
<year>2022</year>
<publisher-name><![CDATA[Liberty Univ.]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B13">
<label>(13)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Yaacoub]]></surname>
<given-names><![CDATA[J.P. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Noura]]></surname>
<given-names><![CDATA[H. N.]]></given-names>
</name>
<name>
<surname><![CDATA[Salman]]></surname>
<given-names><![CDATA[O.]]></given-names>
</name>
<name>
<surname><![CDATA[Chehab]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Ethical hacking for IoT: Security issues, challenges, solutions and recommendations,'']]></article-title>
<source><![CDATA[Internet of Things and Cyber-Physical Systems]]></source>
<year>2023</year>
<volume>3</volume>
<page-range>280-308</page-range></nlm-citation>
</ref>
<ref id="B14">
<label>(14)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Morozova]]></surname>
<given-names><![CDATA[O.]]></given-names>
</name>
<name>
<surname><![CDATA[Nicheporuk]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Tetskyi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Tkachov]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Methods and technologies for ensuring cybersecurity of industrial and web-oriented systems and networks,'']]></article-title>
<source><![CDATA[Radioelectronic and Computer Systems]]></source>
<year>2021</year>
<numero>4</numero>
<issue>4</issue>
<page-range>145-56</page-range></nlm-citation>
</ref>
<ref id="B15">
<label>(15)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Walkowski]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Oko]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Sujecki]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Vulnerability Management Models Using a Common Vulnerability Scoring System,'']]></article-title>
<source><![CDATA[Applied Sciences]]></source>
<year>2021</year>
<volume>11</volume>
<numero>18</numero>
<issue>18</issue>
<page-range>8735</page-range></nlm-citation>
</ref>
<ref id="B16">
<label>(16)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Santillán]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Suárez]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Cárdenas]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Desarrollo de una herramienta IoT para optimizar el control de la humedad en el cultivo de cacao,'']]></article-title>
<source><![CDATA[Memoria Investigaciones en Ingeniería]]></source>
<year>2023</year>
<volume>25</volume>
<page-range>246-65</page-range></nlm-citation>
</ref>
<ref id="B17">
<label>(17)</label><nlm-citation citation-type="book">
<collab>Banco Interamericano de Desarrollo and Organización de Estados Americanos</collab>
<source><![CDATA[''Reporte Ciberseguridad 2020: riesgos, avances y el camino a seguir en América Latina y el Caribe,'']]></source>
<year>2020</year>
<publisher-name><![CDATA[Washington, DC, USA]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B18">
<label>(18)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Aguilar Antonio]]></surname>
<given-names><![CDATA[J. M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''La brecha de ciberseguridad en América Latina frente al contexto global de ciberamenazas,'']]></article-title>
<source><![CDATA[Revista de Estudios en Seguridad Internacional]]></source>
<year>2020</year>
<volume>6</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>17-43</page-range></nlm-citation>
</ref>
<ref id="B19">
<label>(19)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Aguilar Antonio]]></surname>
<given-names><![CDATA[J. M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Retos y oportunidades en materia de ciberseguridad de América Latina frente al contexto global de ciberamenazas a la seguridad nacional y política exterior,'']]></article-title>
<source><![CDATA[Estudios Internacionales]]></source>
<year>2021</year>
<volume>53</volume>
<numero>198</numero>
<issue>198</issue>
<page-range>169</page-range></nlm-citation>
</ref>
<ref id="B20">
<label>(20)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Denslin Brabin]]></surname>
<given-names><![CDATA[D. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Bojjagani]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<source><![CDATA[2023 International Conference on Networking and Communications (ICNWC)]]></source>
<year>2023</year>
<conf-name><![CDATA[ ''A Secure Mechanism for Prevention of Vishing Attack in Banking System,'']]></conf-name>
<conf-loc>Chennai, India, </conf-loc>
<page-range>1-5</page-range></nlm-citation>
</ref>
<ref id="B21">
<label>(21)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Daud]]></surname>
<given-names><![CDATA[N. I.]]></given-names>
</name>
<name>
<surname><![CDATA[Abu Bakar]]></surname>
<given-names><![CDATA[K. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Md Hasan]]></surname>
<given-names><![CDATA[M. S.]]></given-names>
</name>
</person-group>
<source><![CDATA[2014 Science and Information Conference]]></source>
<year>2014</year>
<conf-name><![CDATA[ ''A case study on web application vulnerability scanning tools,'']]></conf-name>
<conf-loc>London, UK, </conf-loc>
<page-range>595-600</page-range></nlm-citation>
</ref>
<ref id="B22">
<label>(22)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Al Ismaili]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Enhancing Cybersecurity: Exploring Effective Ethical Hacking Techniques with Kali Linux,'']]></article-title>
<source><![CDATA[Research and Applications Towards Mathematics and Computer Science]]></source>
<year>2023</year>
<volume>5</volume>
<page-range>135-52</page-range><publisher-name><![CDATA[E.M. Abo-Dahab Khedary, Ed. India: B P International]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B23">
<label>(23)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Alkhurayyif]]></surname>
<given-names><![CDATA[Y.]]></given-names>
</name>
<name>
<surname><![CDATA[Saad Almarshdy]]></surname>
<given-names><![CDATA[Y.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Adopting Automated Penetration Testing Tools,'']]></article-title>
<source><![CDATA[Journal of Information Security and Cybercrimes Research]]></source>
<year>2024</year>
<volume>7</volume>
<numero>1</numero>
<issue>1</issue>
<page-range>51-66</page-range></nlm-citation>
</ref>
<ref id="B24">
<label>(24)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Bryushinin]]></surname>
<given-names><![CDATA[A. O.]]></given-names>
</name>
<name>
<surname><![CDATA[Dushkin]]></surname>
<given-names><![CDATA[A. V.]]></given-names>
</name>
<name>
<surname><![CDATA[Melshiyan]]></surname>
<given-names><![CDATA[M. A.]]></given-names>
</name>
</person-group>
<source><![CDATA[Conference of Russian Young Researchers in Electrical and Electronic Engineering (ElConRus)]]></source>
<year>2022</year>
<conf-name><![CDATA[ ''Automation of the Information Collection Process by Osint Methods for Penetration Testing During Information Security Audit,'']]></conf-name>
<conf-loc>Saint Petersburg, Russian Federation </conf-loc>
<page-range>242-6</page-range></nlm-citation>
</ref>
<ref id="B25">
<label>(25)</label><nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Chatzoglou]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
<name>
<surname><![CDATA[Kouliaridis]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
<name>
<surname><![CDATA[Kambourakis]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Karopoulos]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Gritzalis]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''A hands-on gaze on HTTP/3 security through the lens of HTTP/2 and a public dataset,'']]></article-title>
<source><![CDATA[Comput. Secur.]]></source>
<year>2022</year>
<volume>125</volume>
<page-range>103051</page-range></nlm-citation>
</ref>
<ref id="B26">
<label>(26)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Guaman]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Guaman]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Jaramillo]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Sucunuta]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
</person-group>
<source><![CDATA[2017 12th Iberian Conference on Information Systems and Technologies (CISTI)]]></source>
<year>2017</year>
<conf-name><![CDATA[ ''Implementation of techniques and OWASP security recommendations to avoid SQL and XSS attacks using J2EE and WS-Security,'']]></conf-name>
<conf-loc>Lisbon, Portugal, </conf-loc>
<page-range>1-7</page-range></nlm-citation>
</ref>
<ref id="B27">
<label>(27)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Palacios]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Fernandez-Portillo]]></surname>
<given-names><![CDATA[A. F.]]></given-names>
</name>
<name>
<surname><![CDATA[Sanchez-Ubeda]]></surname>
<given-names><![CDATA[E. F.]]></given-names>
</name>
<name>
<surname><![CDATA[Garcia-De-Zuniga]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[HTB: A Very Effective Method to Protect Web Servers Against BREACH Attack to HTTPS]]></article-title>
<source><![CDATA[IEEE Access]]></source>
<year>2022</year>
<volume>10</volume>
<page-range>40381-90</page-range></nlm-citation>
</ref>
<ref id="B28">
<label>(28)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Vlachos]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
<name>
<surname><![CDATA[Stamatiou]]></surname>
<given-names><![CDATA[Y. C.]]></given-names>
</name>
<name>
<surname><![CDATA[Nikoletseas]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''The Privacy Flag Observatory: A Crowdsourcing Tool for Real Time Privacy Threats Evaluation,'']]></article-title>
<source><![CDATA[Journal of Cybersecurity and Privacy]]></source>
<year>2023</year>
<volume>3</volume>
<numero>1</numero>
<issue>1</issue>
<page-range>26-43</page-range></nlm-citation>
</ref>
<ref id="B29">
<label>(28)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Wróbel]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[K&#281;dziora]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Szczepanik]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Jó&#378;wiak,]]></surname>
<given-names><![CDATA[P. P.]]></given-names>
</name>
<name>
<surname><![CDATA[Jó&#378;wiak]]></surname>
<given-names><![CDATA[A. M.]]></given-names>
</name>
<name>
<surname><![CDATA[Mizera&#8211;Pietraszko]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[Proc. 35th International Conference on Advanced Information Networking and Applications (AINA-2021)]]></source>
<year>2021</year>
<volume>1</volume>
<conf-name><![CDATA[ ''Progressive Mobile Web Application Subresource Tampering During Penetration Testing,'']]></conf-name>
<conf-loc>Toronto, ON, Canada, </conf-loc>
<page-range>297-306</page-range></nlm-citation>
</ref>
<ref id="B30">
<label>(30)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Shukla]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Misra]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Varshney]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''HTTP header based phishing attack detection using machine learning,'']]></article-title>
<source><![CDATA[Transactions on Emerging Telecommunications Technologies]]></source>
<year>2024</year>
<volume>35</volume>
<numero>1</numero>
<issue>1</issue>
</nlm-citation>
</ref>
<ref id="B31">
<label>(31)</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Rawat]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Kumar]]></surname>
<given-names><![CDATA[I.]]></given-names>
</name>
<name>
<surname><![CDATA[Mohd]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Maheshwari]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Sharma]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
</person-group>
<source><![CDATA[Proc. International Conference on Innovative Computing and Communications (ICICC-2023)]]></source>
<year>2023</year>
<volume>1</volume>
<conf-name><![CDATA[ ''Analysis of Top Vulnerabilities in Security of Web-Based Applications,'']]></conf-name>
<conf-loc>Delhi, India </conf-loc>
<page-range>723-36</page-range></nlm-citation>
</ref>
<ref id="B32">
<label>(32)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Setiawan]]></surname>
<given-names><![CDATA[E. B.]]></given-names>
</name>
<name>
<surname><![CDATA[Setiyadi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Web vulnerability analysis and implementation,'']]></article-title>
<source><![CDATA[IOP Conf. Ser. Mater. Sci. Eng.]]></source>
<year>2018</year>
<volume>407</volume>
<page-range>012081</page-range></nlm-citation>
</ref>
<ref id="B33">
<label>(33)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Sharma]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Yadav]]></surname>
<given-names><![CDATA[N. S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''A multilayer stacking classifier based on nature-inspired optimization for detecting cross-site scripting attack,'']]></article-title>
<source><![CDATA[International Journal of Information Technology]]></source>
<year>2023</year>
<volume>15</volume>
<numero>8</numero>
<issue>8</issue>
<page-range>4283-90</page-range></nlm-citation>
</ref>
<ref id="B34">
<label>(34)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Singh]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Kumar]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Analyzing Security and Privacy issues for Multi-Cloud Service Providers Using Nessus,'']]></article-title>
<source><![CDATA[2023 Fifth International Conference on Electrical, Computer and Communication Technologies (ICECCT)]]></source>
<year>2023</year>
<page-range>01-8</page-range></nlm-citation>
</ref>
<ref id="B35">
<label>(35)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Vishnuram]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Tripathi]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Kumar Tyagi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Ethical Hacking: Importance, Controversies and Scope in the Future,'']]></article-title>
<source><![CDATA[2022 International Conference on Computer Communication and Informatics (ICCCI)]]></source>
<year>2022</year>
<page-range>01-6</page-range></nlm-citation>
</ref>
<ref id="B36">
<label>(36)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ashraf]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Zahra]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Asif]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Bin Ahmad]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Zafar]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Ethical Hacking Methodologies: A Comparative Analysis,'']]></article-title>
<source><![CDATA[2021 Mohammad Ali Jinnah University International Conference on Computing (MAJICC)]]></source>
<year>2021</year>
<page-range>1-5</page-range></nlm-citation>
</ref>
<ref id="B37">
<label>(37)</label><nlm-citation citation-type="book">
<collab>Rodríguez Matías</collab>
<source><![CDATA[Bachelor's Thesis]]></source>
<year>2021</year>
<publisher-name><![CDATA[Univ. Estatal de la Península de Santa Elena]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B38">
<label>(38)</label><nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Coello Ochoa]]></surname>
<given-names><![CDATA[I. N.]]></given-names>
</name>
</person-group>
<source><![CDATA[Degree Thesis]]></source>
<year>2021</year>
<publisher-name><![CDATA[Univ. Politécnica Salesiana]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B39">
<label>(39)</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Artavia Madrigal]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Guevara García]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Mora Zumbado]]></surname>
<given-names><![CDATA[I.]]></given-names>
</name>
<name>
<surname><![CDATA[Murillo Murillo]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Ramírez González]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Solano Ruiz]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[''Un Análisis del sistema educativo costarricense: Desafío crítico para la ciberseguridad del país,'']]></article-title>
<source><![CDATA[Rhombus]]></source>
<year>2023</year>
<volume>3</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>1-19</page-range></nlm-citation>
</ref>
</ref-list>
</back>
</article>
