Network Security
Penetration Testing – Securing your business.
Network management of any organisation is one of the easiest targets for attacks. Wireless networks are highly vulnerable to MiTM, DoS, and De-Authentication attacks, among others. Networks are also vulnerable to DoS attacks, Malware Attacks, Snooping and Man-in-the Middle attacks.
Information Gathering
At the outset we perform detailed reconnaissance about the network, its architecture, firewall configurations and other related intelligence. Automated scanners are used to simulate the black-box testing environment. All activities are carried out on-site.
Planning And Analysis
Based on the information collected we devise an approach to mimic real time attacks. To minimise impact we plan the attack, either on a dummy environment or during times of lowest traffic.
Vulnerability Assessment
We run vulnerability scanners to look for possible vulnerabilities and common vulnerabilities related to the platform, services, open ports, obsolete firmware builds, and unauthenticated devices.
Penetration Testing
We run exploits on the network to evaluate its security, using custom scripts, open source exploits, in-house tools and third-party exploit frameworks to achieve high degree of penetration. For every network device, we conduct dedicated security assessments to find vulnerabilities and launch the attack.
Reporting
We provide concise reports of the vulnerabilities discovered, along with discussion on the nature of the vulnerability, its impact, threat level, and recommendations to neutralise the vulnerability.
Discussion
Our technical experts discuss the report, along with the bugs found, and their impact scenario with the client’s development team. We also suggest the best ways to implement network resilience, such as device-level security, rogue device detection, endpoint and perimeter security.
Advantages
- Proactive reporting of critical vulnerabilities affecting network security
- Prevent device-level threats, network snooping and malware attacks
- Prevent unauthorised access to the network, unaffordable downtimes and disruption of business due to DoS attacks
- Suggest best practice for endpoint security, firewall updates, access management and perimeter security
