Diseño e implementación de la ciberseguridad y el aseguramiento de la calidad para una plataforma web de gestión administrativa de un ingenio azucarero en Guatemala

Abstract

El presente trabajo de graduación aborda el diseño e implementación de la ciberseguridad y el aseguramiento de la calidad para una plataforma web de gestión administrativa destinada a un ingenio azucarero en Guatemala. Se enfoca en la integración de prácticas DevSecOps para garantizar la protección de la información, la confiabilidad y la continuidad operativa. El proyecto propone un marco reproducible y auditable que fortalece la calidad y seguridad en proyectos web, considerando el balance entre riesgos, costos y mantenibilidad. Se agradece al Ingenio Santa Ana por la oportunidad y a los asesores por su apoyo.

This work designs and implements a cybersecurity and quality assurance module for a web platform of adaptable forms in the agricultural sector. The module aims to integrate access controls, vulnerability detection, automated testing, CI/CD pipelines, and informationprotection policies, following information security, application security, DevSecOps, and quality assurance practices. To achieve this, the solution configures static analysis with Sonar- Cloud (vulnerabilities, issues, coverage, maintainability, and reliability), secret scanning with Tru!eHog, dependency analysis with Snyk, Content Security Policy on the frontend, TLS encryption for published services, automated penetration testing with OWASP ZAP in local environments, and deployment validation on Google Cloud Run, alongside hardening of the Docker container image. The main results include passing the quality gate with A ratings in maintainability, security, and reliability; overall test coverage above 65% (71% in the frontend and 84% in the backend) with less than 5% duplicated code; no security hotspots or vulnerable dependencies; no high-severity alerts in dynamic analysis; a vulnerability-free container image; and correct service operation on Cloud Run. CSP directives, as well as the presence of TLS and Cloudflare in the infrastructure, were documented. Overall, the project establishes a reproducible process that reduces the platform’s exposure to critical vulnerabilities through the integrated use of scanning tools and security policies, thereby strengthening the system’s security posture.