Security Assessments And Reviews
The Ciphent Professional Security Services team delivers comprehensive, enterprise-wide security assessments and reviews. Our team of expert consultants can show you how to identify and implement security best practices to reduce current and future threats to your critical business assets.
Penetration Testing
Our team of security experts provide an external perspective of the vulnerabilities that are Internet-accessible and exploitable. The combination of Ciphent assessment technology, open source and commercial tools, and our process will validate all security controls. The Business Case: The vulnerabilities we find… are exploitable by anyone in the entire world.
Wireless Assessment
Ciphent will identify security weaknesses, vulnerabilities, and threats impacting your wireless infrastructure from both the wireless and wired perspectives. We assess your authorized access points as well as identify potential rogue access points at those facilities.
Social Engineering
Clients benefit from the increased awareness of the emerging types of social engineering attacks. From Spearfishing to Pretexing to Chat-spoofing, the Ciphent Team will quickly help your organization understand and plan mitigation strategies around the next generation of Social Engineering attacks.
Firewall and Perimeter Assessments
Perimeter and network security is the natural first line of defense for most organizations. Firewalls are now coupled with gateway filtering appliances and intrusion prevention systems; however, poorly configured systems, out-of-date policies and deployment architectures can lead to a false sense of security. The Ciphent Security Team will analyze all perimeter components in detail, to ensure that every ACL, firewall rule, and IPS signature is properly enabled to prevent the myriad of external attacks.
Log Analysis
Event and log data is difficult to capture, analyze, and react to in real-time without the proper technology and business processes. Our Log Analysis Services’ include reviewing a one-time snapshot of log files, reviewing server configurations and their audit and logging configurations, compliance log reviews, and incident response services.
Mobile Security
Ciphent can help secure your organization's mobile devices and communication routes. Laptops, PDAs, cell phones and Blackberries often allow remote access to internal resources; Ciphent will evaluate and provide recommendations about reducing and managing the potential risk on your overall network security posture.
VoIP Security
With an increased dependency on VoIP, come new threats to your network. As with many new technlogies, the bulk of VoIP calls and communication tunnels are not yet secured. Whether it be SIP registration hijacking, using man-in-the-middle to eavesdrop or 'normal' data DoS attacks, the Ciphent Security Team will work with you to ensure robust voice communications within your organization.
SCADA Assessments
A large portion of the nations automated infrastructure, electricity, rail, water are monitored by SCADA technology. Because these services are used by the government, business and the populace as a whole, SCADA (Supervisory Control and Data Acquisition) networks are considered mission critical. The Ciphent Security Team can assess the security of your SCADA systems, provide direction and solutions to secure SCADA networks.
Host Configuration Review
Even the most secure network can be compromised by a single poorly configured host. The Ciphent team can assess every host, in your enterprise, against industry security and configuration standards. From desktop gold standards to server images, we can help secure your entire environment one system at a time.
SCAP Express Assessments
The Security Content Automation Protocol (SCAP) is a multi-agency US Federal Government initiative that was created to help automate low-level security tests of operating platforms and applications using a standards-based approach for both public and private sector organizations. The SCAP Express Assessment leverages NIST SCAP compliant tools in addition to human analysis and vulnerability verification to accurately test, measure, and report on identified vulnerabilities and policy compliance issues required by FISMA and DoD 8500.2/8510. All SCAP testing will occur at the customer location and all SCAP evidence will remain within client physical and logical boundaries. The final technical report will be delivered and documented in compliance with FISMA 800-53 mappings.
Database Risk & Vulnerability Assessments
Ciphent’s Cyber Security Experts provide you with accurate and in-depth risk assessments of your database systems. Mission critical data and information, the crown jewels of your organization, are stored in databases 24/7. These databases are quickly becoming the favorite target of malicious insiders and external attackers. We leverage industry leading technology to give your organization a snapshot of their database vulnerabilities and misconfigurations while providing the expertise to fix and remediate these threats.
