Exposição e vulnerabilidades de ativos no Brasil

Abstract

The rapid digitization of services in Brazil, which intensified after 2020, has significantly expanded the country’s digital attack surface. Many services, such as web servers, databases, and network protocols, have been exposed to the internet, often with inadequate configurations or vulnerable versions, making them easier to exploit—especially in legacy systems that are no longer maintained. In this context, this study assesses the degree of exposure of publicly accessible services in the country and identifies potential associated vulnerabilities. To this end, it employs a descriptive and quantitative research approach, collecting and analyzing data obtained from platforms such as Shodan and Censys. This data enables the identification of exposed services, software versions, and indications of insecure configurations. As a result, the study seeks to identify patterns of exposure, quantify potential vulnerabilities, and discuss common flaws, thereby aiding in the understanding of the national context and emphasizing the importance of proper information security practices.