Internet

Internet Security Assessment

How do you find out what hackers can get into before they've tried? SSG's "ethical hackers" can simulate a real intruder's attacks but in a controlled, safe way for you. And they'll tell you what they find and how you can fix it to keep them out. This assessment is comprehensive, covering not only the intruder view of the system but also examines the configuration and management of the systems, factors that could lead to new exposures in the future. This assessment will be custom designed to cover whatever system platforms, network connections, software and databases comprise your IT facilities.

When you provide a service to users over the Internet, such as a database linked to your webserver, you expose your organization to new risks. Every service opens a new path between the Internet and your organization. These paths to your organization's network and data can be expoited by "hackers". Your organization can be embarrassed or interrupted in the best cases, and can lose customers and money in the worst.

SSG can help your organization to minimize the risk of a hacker causing damage to your network. This service gives you a comprehensive review of your Internet solution, on both a technical level and a management level. The technology review, consisting of multiple "intrusion tests" and configuration analysis, gives you a thorough understanding of the strengths and weaknesses of your Internet solution. The management review consists of interviews with administrators and management, and of reviews of security documentation. This provides you with insight into how your organization is prepared to handle the security of the solution over time.

Range of Services

• review of your overall network design to determine how it effectively isolates unreliable outside networks from gaining access to your internal, trusted networks and systems
• review of the security design of your selected platforms (routers, firewalls, web servers, application servers, etc.) to determine if any functions provided by them could cause undesirable security exposures
• test designed to exercise all components within the scope of the project in an attempt to gain unauthorized access to your internal network from three perspectives:
  1. a low level solitary hacker
  2. a small team of competent hackers
  3. and an expert team of highly motivated hackers
• comprehensive review of the security management controls for the included components covering:
  • policy
  • organization
  • personnel
  • asset classification and control
  • physical security
  • access control
  • network and computer management
  • business continuity
  • system development and maintenance
  • compliance
• report describing the strengths and weaknesses found in all of the above activities with recommendations for short and long term improvements