Ransomware: segurança da informação e prevenção

Abstract

The general objective of this work was to present the ABNT NBR ISO/IEC 27002 and ABNT NBR ISO/IEC 27005 standards, show a ransomware attack, as an example, in addition to suggesting how a user can prevent to ensure the security of data. your computer. As for technical procedures, this research used bibliographical and experimental research. The results showed how to attack a computer, using the operating system Kali Linux, through The Fat Rat tool, listing a step by step to create a ransomware, as an example of how to attack a personal computer. The study allowed us to conclude that the security policy standards ABNT NBR ISO/IEC 27002 and ABNT NBR ISO/IEC 27005 have as basic principles the integrity, confidentiality and availability of each information. If the guidelines of these standards are applied in companies, they can make networks more secure against cyber attacks, such as in the prevention of malware, presented in this paper.