Análise das vulnerabilidades em sistema de certificação digital centralizados caso de estudo: Instituto Nacional de Tecnologias de Informação e Comunicação

Abstract

The analysis of vulnerabilities in Centralized Digital Certification Systems consists of the identification, assessment and the application of possible risk control techniques in cybersecurity threats identified in these systems. With this, the objective of the present work is precisely to elaborate a risk management plan for the Digital Certification System of Mozambique managed by the National Institute of Information and Communication Technologies using principles, policies, strategies, tools and good security practices. The management of Digital Certification Systems is a challenge that affects different public and private institutions in several countries, as these systems have critical applications, such as the case of digital signature of electronic documents, which may be critical for their users, bringing consequences such as the exploitation of vulnerabilities in these systems by computer attackers with the aim of compromising their security. In this way, it is important to elaborate a risk management plan, as it will make it possible to avoid future losses in information assets in the management of Mozambique's Digital Certification System. In order to achieve the objective, the main security concepts in Centralized Digital Certification Systems were explained and then an analysis of the vulnerabilities and the techniques used in the reduction and mitigation of cybersecurity risks in these systems was carried out. Since the use of these systems is relatively new in Mozambique, the research aims not only to identify vulnerabilities in Centralized Digital Certification Systems but also to explore their literature in order to clarify the impact of their use on society.