Desarrollo de un prototipo de framework que integre escaneo activo, inteligencia de exploit-DB y análisis de contexto que priorice y optimice la gestión de vulnerabilidades en servidores virtualizados Linux a ser aplicado en una empresa de telecomunicaciones de la ciudad de Guayaquil.

Abstract

Our degree project proposal was based on the development of a framework for managing and prioritizing vulnerabilities in virtualized Linux servers, used by a telecommunications company in the city of Guayaquil. Due to the progressive advance of technological dependence, there is a desire to strengthen security for the organization's critical assets, such as its operational continuity. The research focused on a descriptive and applied analysis, which was carried out under the current vulnerability management process using a mixed methodology, which involved a qualitative analysis to understand the operational context and a quantitative analysis to observe the metrics of the progress indicators. For technological development, a prototyping methodology is applied that allows for the orderly control of the design, implementation, testing, and validation stages of the prototype. The research begins by reviewing essential background and core concepts in information security, centering on vulnerability management within virtualized Linux environments. It identifies major limitations in the existing method—particularly the lack of automation and proper context-based prioritization—and explains the underlying causes. From there, the study proposes a system that brings together active scanning, threat intelligence integration, and contextual assessment to classify vulnerabilities based on their true criticality and business relevance. The proposed framework supports the production of dependable, practical reports, gives technicians clearer operational oversight, and helps make more efficient use of cybersecurity resources overall. In the end, the prototype developed here improves how vulnerabilities are handled on the company's virtualized servers, providing tangible operational gains as well as strategic benefits for the long term. This work lays a solid foundation for continued research and practical advances in enterprise digital protection.