NETWORK VULNERABILITY ASSESSMENT

Proactively identifying vulnerabilities and correctly mitigating them is an important step that organizations should take to protect their assets and information.  SeNet can assist in this task by performing vulnerability assessments and penetration testing.  While these two tasks may seem similar, they are in fact quite different:

• Vulnerability assessment identifies vulnerabilities and exposures in assets.
• Penetration test identifies at least one way that an adversary could exploit vulnerabilities and exposures to compromise a target or satisfy a related objective.

SeNet recommends that organizations have both tasks performed.  Typically a vulnerability assessment is recommended first, followed by a penetration test once the initial identified vulnerabilities have been addressed.

SeNet uses the following methodology when performing a vulnerability assessment:

 

 

A typical SeNet comprehensive security assessment consists of the following assessment areas:

• External assessment
• Internal assessment
• Firewall assessment
• VPN assessment
• War dialing
• Wireless security assessment
• Social engineering
• Server configuration assessment
• Microsoft® Windows® assessment
• UNIX environment assessment
• Network architecture assessment
• Mobile security assessment
• VoIP security assessment (if applicable)
• Physical security assessment

SeNet uses a variety of commercial and freeware tools supplemented by manual verification of findings by our experts. Our inventory of tools is continuously expanded and updated.