Network Penetration Testing

As both the frequency and ingenuity of electronic attacks increase, so to does the need to regularly test the effectiveness of your information security controls. Theft of confidential data, such as client financial information and corporate secrets are no longer the sole objective of hackers as web site defacement now provides malicious individuals with a mechanism to degrade the public image of your institution. Network Penetration Testing remains a powerful tool to identify the vulnerabilities that may exist within your security architecture and gives you the opportunity to fix them before they are exploited.

Penetration Testing is like looking for unlocked doors and windows in a building, which represents an essential first step in any security testing strategy. Our consultants use a proven combination of industry tools and in-house techniques to thoroughly probe and identify vulnerabilities in your Internet-facing IT systems. And, unlike automated services that typically provide a computer-generated list of every vulnerability that exists on a web or email server, we’ll prioritize those that are relevant to your infrastructure and include pragmatic advice on how to overcome them.

Our next level of service goes further by exploiting the weaknesses we’ve identified and simulating an actual attack. Using the same techniques as actual hackers, our specialists will conduct activities such as information gathering, network fingerprinting and attempting to bypass access controls. And, with one of the most experienced and respected penetration testing teams, we’re able to comprehensively check all operating platforms as well as investigate areas such as cross-site scripting, code hacking problems, SQL database injection, XML and web services.

Acknowledging that a significant proportion of malicious attacks originate from within an organization, our most comprehensive level of service employs advanced testing techniques internally as well as remotely. In fact, some reports indicate that over 70% of hacking takes place internally. Most “think” that their networks are secure. Some “hope” they are based on what their vendors sold or promised them. Very few “know” they are and can prove it. Can you be 100% sure that your network resources are secure?

Our consultants will review your security architecture to identify potential flaws that would afford a knowledgeable intruder access. We will also review software builds on servers, examine web application scripts or check compliance to internal security policies. DataComm’s security consultants will work with your IT staff to simulate Denial of Service attacks, test your responses - by both systems and people – to intrusion efforts, attempt access to wireless networks or use social engineering techniques to identify non-technical points of entry into your organization and its assets.

Regardless of the size of an engagement, though, we’ll always develop a comprehensive report detailing the issues we have identified, an explanation of their implications and recommendations for either reducing or eliminating the risks they pose.

DataComm certified security consultants deploy the “All A’s” testing methodology when performing a network penetration test:
Analyze, Assess, and Appraise during the first phase of a penetration test, DataComm’s security technicians analyze and look for vulnerable devices on your network and determine the types of tests to be performed on the devices. The second phase of the penetration test consists of an assessment of the devices identified in the first phase by thoroughly testing their vulnerabilities. The final and most important phase in the penetration test consists of the technician appraising the security of your network by generating a detailed report of all vulnerabilities that were discovered and solutions to correct them. To make sure that the report is understood in its entirety and all solutions are properly implemented, a follow-up call will be scheduled between the technician that performed the test and selected members of your management and IT staff.

Strict government mandates such as Sarbanes-Oxley and the Gramm- Leach-Bliley Act, along with a dynamic and complex operating environment are forcing organizations to improve the security of business-critical systems and data. Compliance with regulations, the acceleration of potential threats, and a growing remote and mobile workforce are challenging organizations to examine their ability to discover vulnerabilities and take measures to counter them. DataComm’s Penetration Testing Services, securSCAN, combines proven experience and sophisticated technology to ensure vulnerabilities are identified, analyzed and managed effectively, to minimize risk and maximize business results. DataComm offers ongoing penetration testing where we’ll conduct regular, repeat testing of your infrastructure using a pre-agreed program of test levels. The table below illustrates our recommended schedule for institutions using the Internet for, say, marketing or promotional purposes as well as those making more extensive use of the web for activities such as the selling or purchasing of products.

Our testing teams are also equipped with specialized tools to provide wireless testing services. This can help you detect rogue Access Points or “sniffer” equipment that may be attempting to gain unauthorized access to your IT systems.