 |
Security Assessments |
 |
Advanced Network Consulting helps you manage your security related risks by providing security vulnerability assessments. We use a four-step process to identify your threats, both internal and external: |
 |
Discovery Phase – |
| |
We discover your network devices (routers, switches, firewalls, servers, desktop systems, etc.) using techniques such as network port scanning, inverse mapping and packet inspection. Additionally, Advanced Network Consulting scans for wireless access points, both approved and "rouge" access points. |
| Identity Phase – |
| |
Our Network Engineers identify all hosts residing on the network and gather their type and version information. We then perform testing for services and applications that are publicly accessible. Collect network identification such as IP and DNS information, as well as the role of the device within the infrastructure. We determine what applications and services have potential vulnerabilities. |
| Verification Phase – |
| |
Using information collected in the Discovery and Identity phases, our staff use both manual and automated methods to exploit and verify the discovered vulnerabilities. On the physical level, we take advantage of network firmware weaknesses. On the software level, we exploit the Operating systems and application configuration errors, unapplied patches, and weaknesses in authentication systems. Our Network Engineers elevate the potential unauthorized access to the highest levels possible. |
| Reporting Phase – |
| |
We perform an in depth analysis of the information collected. Our Network Engineers assemble the relevant information into our Security Risk and Vulnerability Assessment Report. We review the report with you and we help you manage your risks by prioritizing vulnerabilities into critical, medium, and low classifications. |
| Through this process together with the client, we develop a Customized Implementation Plan. This allows for a structured, systematic roll out of the necessary configuration changes, addition of security devices and policies, as well as the removal of unnecessary equipment and policies. |
|
