In the world of malware, there is a category called computer worms, this type has a complex technological structure, but an ability to replicate itself automatically without the intervention of a human and can be distributed to other computers that are connected to the network, with a malicious code that can infect a computer that will later be used to infect others, spreading through the network. This malicious code used by computer worms could be found with ob- obfuscated code that allows it to hide part of its code when analyzed, not being able to classify it. In this framework, the research proposes the creation of a technological component (a piece of software) that allows a faster categorization of computer worms that have obfuscation in their code, proposing the development of a component that allows selecting a malicious file (computer worm) and that through the selection of a rule with the YARA (Yet Another Ridiculous Acronym) tool, verifies the obfuscation in it, having also a button that allows verifying the hash in the Virus Total platform. The purpose of this component is to help and support the Information Security Management Systems for the analysis of malware in investigations of threat intelligence units or cybersecurity teams that need to categorize this type of malware, automating the manual processes and validating the obfuscation in this type of malware.

Wi-Fi wireless networks are an integral part of everyday life and as such security, the protection of these networks according to their evolution over time has been a constant challenge due to their use and the information that is transmitted through it and changes in the purpose of their use and the current needs of electronic devices [1]. Currently, there are several sources of documentation that aim to guide both designers of Wi-Fi wireless networks and security managers who must perform audits to networks, and consequently with the need to incorporate the principle of defense in depth. This study presents an experimental review [2] to validate established security variables to measure their effects and obtain results on how these multivariables [3] relate to each other and affect the gap in the results of an information security audit.

Systems, data, users, and networks are essential in terms of information security. Systems, data, users and networks are essential in terms of information security. Wi-Fi wireless networks play a crucial role in increasing connectivity, as well as preventing and monitoring unauthorized access. Nonetheless, Wi-Fi wireless networks’ security is conditioned by different variables incorporated in standards, norms, good practices, and various investigations concerning this topic.

Computer worms are a type of malware that have a complex technological structure and the ability to automatically create replicas of themselves without human interaction and distributing themselves to other computers connected to the network; they have a malicious code component that allows them to infect one computer and then use it to infect others. This cycle repeats itself, rapidly increasing the number of infected computers if action is not taken in time. Within this framework, the research is based on a systematic review of the methodology used to analyze scientific articles related to malware and specifically to computer worms. Through this review and the abstraction of important data, a synthesis of the results is made to support the research, resulting in a new proposal for the classification of computer worms according to their obfuscation capacity, dividing it into four levels: species, type, class and evasion. This classification allows a modern computer worm to be categorized in such a way that the main contribution is that it can serve as a model or as a complement to an Information Security Management System (ISMS), in the systems responsible for detecting and/or defending organizations against worms attacks.

Currently the Internet is the main tool for interconnection of systems and data processing, SCADA systems, marketing, government; Even medical systems, among others, need to be connected to the internet to facilitate the development and processing of their data, the services that operate with the DICOM protocol (Digital Imaging and Communications in Medicine) work with medical equipment. This protocol is the universal format for the exchange of medical images, due to which it is used worldwide for communication between devices, the so-called PACS servers (Image Archiving and Communication System). These are information receptacles where medical centers store X-rays, files, personal information of patients, information of the treating physician, among others. The purpose of this research is to carry out a cybersecurity analysis in the operational and connected nodes in Chile that operate with the DICOM protocol among their services, with the execution of a modified experimental design that will allow the discovery of active nodes, discovery of exposed services and vulnerabilities, the analysis of said services as well as their vulnerabilities, their categorization and finally the validation of the vulnerabilities found. It seeks to know the current situation in cybersecurity issues of the nodes that use the DICOM protocol for communication, identifying the possible attack vectors that third parties may use in order to compromise the integrity, confidentiality, availability and authenticity of said systems.

Technology is changing the world, society, and people. For many, there is no conceivable living without it. Its evolution has had exponential growth, that is why many of the futuristic scenarios are no longer so and we are facing an inevitable human transformation; such as, the impact of these new technologies on human life. It is necessary to reflect what the design considerations have been or if there was an analysis that incorporated human and ethical values in its evaluation was carried out. This takes us a little further back to the training of the engineer, who was taught to evaluate technically and economically a technological project, but a methodology to evaluate the scope and impacts that this technological project has were not included in his training. Thus, it is vital to teach how to reflect carefully on the consequences and effects it causes to nature and society. The aim of this research is to offer a purposeful assessment of the incorporation of ethics and human values linked to the training of an engineer in the technological area.

It is essential to consider the security and privacy (SYP) of information as part of the development of technological solutions and special attention when a large majority of people need to access the internet to carry out their daily activities. Despite the importance of SyP, this article shows that topics related to security and privacy are scarce in HCI courses and that only some universities offer specific courses that integrate usability and security. Additionally, information is presented on topics that the universities include in their courses to have a starting point that serves as a reference to integrate current courses and in this way teach those responsible for generating technological solutions on usable security.

The continuous security information risks force organizations to constantly update their security protocols. This implies, among other aspects, to base their monitoring mainly on their own maturity status in the SGSI (Information Security Managing System). When a Chief Information Security Officer elaborates a protection plan of IT assets, a wide and varied range of threats must be considered. These tasks are executed using conceptual models, which do not usually work in an integrated and systematic way. Thus, these models seek to increase maturity levels for protecting and safeguarding information security. Among the most common [1], we find COBIT 5, CSE-CMM, NIST-CRST to which we add the security standards like OWASP, ISO 27000-1, SANS. From here then, it is possible to see the lack of a multi-standard model that integrates systematically the individual actions with the expected results. The present project proposes an integrated model that links and blends, on the one hand, the security standards and, on the other hand, the measurements of the organization’s maturity levels. By doing this, it is possible to count with a set of relevant actions, classified by evaluation categories, which provide conditions for crossing regulations and standardized controls. This finally allows to explore how efficient these acquired measures are, and, when needed, the corrections that should be introduced ahead.

This research presents a proposal of malware classification and its update based on capacity and obfuscation. This article is an extension of [4]a, and describes the procedure for malware updating, that is, to take obsolete malware that is already detectable by antiviruses, update it through obfuscation techniques and thus making it undetectable again. As the updating of malware is generally performed manually, an automatic solution is presented together with a comparison from the standpoint of cost and processing time. The automated method proved to be more reliable, fast and less intensive in the use of resources, specially in terms of antivirus analysis and malware functionality checking times.

Nowadays, there are significant amounts of malware codes that are created every day. However, the majority of these samples (malware) are variations of other malware that have been already identified. Therefore, most of the analyzed malware have similar structure among them. In this investigation, we will present a technic to extract features throughout different abstraction levels in order to classify malware codes. This analysis is based on three factors: the position where the malware is detected, the functions' calls from each Dynamic Link Libraries (DLL) and the ten most frequently visited hexadecimals per each malware sample. Once those characteristics are obtained, a descriptive vector of each malware is built. This vector works as a training to different learning machines types (SVM, IBL, and Decision Tree) and as a classification of the variations of malware codes (Virus, Backdoor, Trojan, and Adware).The result in the precision of the classification was 78.38% average where 3 types of learning machines were combined. The classified type as virus and algorithm IB1 (Instance Based Learning, IBL) were considered more accurate. These results are a fundamental support to the management system in information security by combining traditional and new classification and detention techniques of malware codes.

The threat that attacks cyberspace is known as malware. In order to infect the technologic devices that are attacked, malware needs to evade the different antivirus systems. To avoid detection, an obfuscation technique must be applied so malware is updated and ready to be performed. No obstant, the technique implementation presents difficulties in terms of its required ability, evasion tests and infection functionality that turn outs to be a problem to keep malware updated. Therefore, a procedure is proposed that allows applying AVFUCKER or DSPLIT techniques. The purpose is to optimize the required technical means, reduce the antivirus analysis and malware functionality check times.

In the development of a system, the perception of usability is vital, moreover in this context, the role of designers is a fundamental pillar between the interaction of different interfaces with the users. This is how semiotics is appreciated as a factor in the expression of ideas at the moment of building a proposal regarding the implementation of a digital battlefield simulator for training prototype, taking into account other avant-garde experiences in this area.

Malware are the big threat within the digital world as they have a highly complex technological structure that is capable of penetrating networks, obtaining confidential information from personal computers and corporate systems, and even of making systems of critical infrastructure vulnerable. However, in order to achieve their objectives, they need to remain updated, so that they will not be detected by the different protection systems which re primarily antivirus. This investigation proposes a certain malware classification based on their obfuscation capacity, and also considering the methods, techniques, procedures and tools that a malicious code requires and that whose result suggests a general vision of the malware and its effective evasion in cyber space.

With the fast growth of the Latin America ecommerce industry, it is thus indispensable to design effective applications for e-commerce websites in a Latin American context, by taking into account cultural factors. In this paper, we conduct an empirical study of different platforms from an exponential business sector. This paper presents initial evidence in support of our argument that interfaces that display characteristics relevant to specific sides of four of Hofstede's cultural dimensions increase usability for all users.

The vertiginous change in technologies and the increasing sophistication that cyber space present require organization and permanent preparation. However, time, education and training, results too short and not appropriate enough through traditional training methods. Training through simulation may offer proper preparation to fight against new threats that exist in this digital battlefield. The paper presents a preliminary proposal of training through simulation in cyber space.