How secure is your infrastructure?

As vulnerabilities proliferate every day, our team puts your infrastructure to the test of those multiples risks by emulating all malicious behaviors employed by hackers.

The Hacker's Playground is an intrusive audit that evaluates the security performance of your Information System. It lists all security issues that are vulnerable to hacking tools and methods.

The Hacker's Playground in action

We first define the scope of our services and the objectives of the assignment. Then, we trigger intrusive tests that seek to reproduce malicious patterns:

• Collect information and search for vulnerabilities.

• Indirect search: WHOIS databases, DNS logs, information obtained via social engineering (telephone, fax, e-mail...)

• Direct search: manual scans (nmap, queso) or automated queries when required.

• Bugtraq lists (Security Focus, Packet Storm) that are relevant to the target architecture help locate multiple vulnerabilities.

Next, we analyze and define the attacks scenarios and carry out the intrusion testing process in accordance with the contract.

At the end of this process, we analyze and present our results. For each project, we provide full details on our findings, security holes, and ways to breach them. An appropriate remedial plan of actions is designed in compliance with customer's objectives.

Benefits of the Hacker's Playground Check-up

• Our engineers are acquainted with those tricks and habits of the "underground" community of hackers and have gained a high level of expertise on attack techniques, which enables them to offer unmatched quality service.

• Our tests are carried out in-depth and seek to evaluate the existing processes to ensure that all attacks are detected and to challenge the responsiveness of the various teams monitoring the network and servers.

• Results are presented in detail: each vulnerability is described along with the technique used to detect it.

• Audits benefit from full privacy as per our charter of ethics and a very rigorous contract established beforehand with the customer.

• With our expertise in voice-image-data, the Hacker's Playgroung audit can be extended beyond network infrastructures to telephony (PBX Check-up) and wireless network (Wireless Check-up) security.

The Hacker's Playground Check-up comes with additional services:

Real time monitoring: deployment of scanners to monitor activities within the network or at terminal points. Reports and alerts are generated to provide real-time visibility on all intrusion attempts into your information system.

Automated discovery of vulnerabilities: automated detection tests are performed is ASP mode to systematically assess all internal and external vulnerabilities of the information system. This data are documented through reports that are updated on a regular basis and that brings you full details on how to improve your security level.