|
Telco Scanning
Scanning
Phone Line Scanning identifies undocumented or uncontrolled modems connecting
client computers directly to the external telephone network. These phone lines and
modems are important because they may represent security holes in the organization's
security perimeter.
Large organizations employ hundreds of dial-up lines for voice communication with
customers, clients, suppliers and employees. As corporations computerize more of their
activities, external phone lines and modems are used with increasing frequency to link
internal computers with external computing resources. These external phone links, while
useful, often represent an undocumented back door into the corporate information network.
Service Methodology
SSG scans all of the client's external phone lines by automatically dialing every
known client phone number and checking for modem responses. When a modem is detected,
the consultant attempts to establish a connection, identify the type of system present,
and then gather information relating to exploitation of the detected system. In instances
where a serious deficiency in security or unrestricted network access is detected, the
consultant will inform the client contact immediately.
Please note this service can only be offered where permitted by law.
|
Client Deliverables
SSG will deliver an Analysis Report that contains an executive security overview,
identification of undocumented dial-up entry points, and an assessment of the
vulnerabilities of each entry point identified. The report will be delivered in bound
hard copy and in electronic form on diskette in Microsoft Word compatible format.
Client Benefits
A Phone Line Scan helps the client identify and eliminate inappropriate computer or
modem entry points to its internal systems and networks. The resulting tighter control
over phone-line based entry points will increase the client's control over its
information systems perimeter, and may even help reduce telephone service costs. A Phone
Line Scan will help the client improve its information perimeter controls, thus reducing
risk and allowing it to conduct its business operations with increased confidence in the
ability to protect valuable data, resources, and reputation.
|
