Segurança cibernética para estações locais com windows e linux mediante a adoção de controles de cibersegurança baseados no CIS V8.

Abstract

With the constant and growing advancement of cyber threats, it is essential that end users adopt robust and proactive security strategies to safeguard their digital assets. However, simply implementing cybersecurity controls does not guarantee total data protection. It is essential to assess the real impact on vulnerability reduction after implementing and using these controls on an endpoint. In this context, this study suggests the creation of a simulated virtual environment to assess the effectiveness of cybersecurity controls based on the widely recognized CIS Controls v8 framework. The approach used involves the creation of a virtualized and heterogeneous environment, consisting of workstations operating with Windows and Linux operating systems. In this way, vulnerability scans and penetration tests are performed in a comparative manner, creating an initial security baseline and another subsequent to the implementation of the controls. The effectiveness of the countermeasures is evaluated quantitatively, using the classification of vulnerabilities detected through the Common Vulnerability Scoring System (CVSS). The comparative analysis focuses on the variation in the number of vulnerabilities in each severity level—Critical, High, Medium, and Low—enabling an impartial assessment of the effect caused by the security measures adopted at the endpoints.