A importância dos controlos técnicos preventivos e detetivos nas redes de dados da Administração Pública

Abstract

The technological evolution and the constant adaptation of the public organization’s “business” to the Communication and Information Technologies brings ambitious challenges. The fact that its processes increasingly supported in the data networks and the Information Systems, brings forth threats that may compromise critical assets. The interoperability needs between systems of public organizations, or between these and systems of external entities, are also increasingly larger. On the other hand, the generalized social dissatisfaction has been promoting the increase of attacks aimed specifically to the networks and systems of public entities. These events then buttress the relevance of the reflection on the theme of the Public Administration network security. It is therefore essential the existence in the State, in a normalized way, mechanisms of threat prevention and detection, able of efficiently containing the menace without considerately affecting the Ministry’s budgets. After a contextualization about the concepts discussed, the dissertation will present a mapping of some of the main current threats inherent to the data network, exemplifying them with recent events. There will also be identified, generically, existing vulnerabilities in the public organizations’ networks and it is abridged some of the already developed work in this ambit. It will characterize the preventive and detective technical controls deemed essential exemplifying its existence resorting to open-source products. It will be proposed a security model, being recommended the strategic positioning of those controls on different network areas, according to an array of criterions. Conclusions will also be presented and potential inherent advantages to the implementation of the model will be identified, existing also a suggestion of continuity of these improvements in future works

Date of Award	18 Mar 2014
Original language	Portuguese
Awarding Institution	Universidade Católica Portuguesa
Supervisor	Tito Lívio dos Santos Silva (Supervisor)