Dienstleistung

Express Security Assessment

von GMV GmbH

Logo von GMV

Key Facts

  • Express Security Assessment
  • Takes 5 days
  • Fast, reliable and cost effective

KATEGORIEN

  • Bedrohungsanalysen
  • VPN/Remote Access

Key Facts

  • Express Security Assessment
  • Takes 5 days
  • Fast, reliable and cost effective

KATEGORIEN

  • Bedrohungsanalysen
  • VPN/Remote Access
Mehr anzeigen

Produktbeschreibung

Due to the situation caused by COVID-19, many companies are facing the need to provide their employees with
remote access, in order to guarantee operational continuity.

There is a risk that this contingency deployment may introduce vulnerabilities in remote access systems. This
particularly applies to VPN systems and virtual desktops (VDI).

Our aim is to provide those responsible for security with a RAPID SECURITY ASSESSMENT for their remote access
systems, focusing on the identification of the most relevant vulnerabilities.


The focus of the assessment is remote access systems:
VPN terminators
For the assessment of VPN terminators, the role of a malicious external agent attempting to gain unauthorised access is adopted.

Virtual desktop infrastructure (VDI)
In the case of VDI, the role of an authorised user is adopted, and the privilege level is evaluated.


--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

DISCOVERY
Port discovery and scanning.
Infrastructure analysis.

VPN DIAGNOSTICS
Login bypass testing based on VPN protocol (PPTP, L2TP, Ipsec/IKE, SSL, etc.).
Validation of password quality.
Testing of access alternatives.
Encryption testing.

VDI DIAGNOSTICS
Bypass testing of security restrictions (cmd console, powershell, etc.).
Testing with file writing techniques.
Data extraction testing.

THIRD PARTY VULNERABILITY DIAGNOSTICS
To check for possible known vulnerabilities associated with the VPN/VDI software.
To also check known vulnerabilities in the underlying infrastructure software.

Mehr anzeigen

Produktexperte