The security of your information system must now deal with with new fields which are sometimes reluctant to take into account all your security criteria: the solutions involving Computer Telephone Integration (PBX-IP, vocal servers, tele-prospecting campaign tools, call tracking...), wireless networks, new web services....

Your needs evolve very quickly and sometimes to the detriment of security. It is therefore necessary to regularly obtain a clear view of the level of security of your information system. Axians offers a range of vulnerability audit and intrusive test services centred around the Hacker's Workshop.
The team of experts of the Hacker's Workshop "plays" the same role as a hacker.

Because they are dedicated to this activity, they have permanent access to the same information and contacts as the "underground" community, which enables them to offer a service of an unequalled quality.

The confidentiality and transparency of the mission are validated by a charter of ethics and a very rigorous contractual frame is established before any operation.

Generally, the Audit-Intrusive test service is declined as follows:
- defining the perimeter of the service and the objectives to be reached,
- Collecting information and researching vulnerabilities,
- Indirect research: WhoIS bases, DNS entries, information obtained via social engineering (telephone, fax, e-mail...)
- Direct research: manual scans (nmap, queso,...) or automated if necessary (through our common offer with Qualys.
- Vulnerability Detection: exploitation of butraq (SecurityFocus, PacketStorm) tailored to the architecture of the Information System studied, using our team's return on experience to list potential vulnerabilities,
- Analysis and definition of the attacking scenario,
- Performing the attack according to the contractual frame,
- Analysis and presentation of results and advice so as to update the level of security.A standard mission to audit a standard architecture lasts 4 days to which must be added 1 day per service (messaging, Web, ftp ...).
Moreover, within the frame of the Axians Voice, Data and Image Global Offer, and of the network infrastructures tests, the Hacker's Workshop can work on telephony (PABX) and wireless networks-related security.

The Hacker's Workshop offer is complemented with a set of services:
Real-time monitoring: Installing sensors makes it possible to permanently monitor the activities practiced inside or at the entrance of the network. Through the reports and alarms it generates, this solution gives real-time visibility on intrusion attempts made on your information system.
Automated vulnerability research: tests detecting the level of vulnerability, both automated and in ASP mode, regularly scan the external or internal vulnerabilities of the information system. The incremental reports make it possible to follow regularly the evolution of your vulnerabilities.

For a free trial of a vulnerability research audit, Click here.

For further information about the Hacker's Workshop, feel free to contact us.