Penetration Test - -Macnica

What is Penetration Testing?

It seems that more and more people are hearing the term "penetration test" due to customer requests and standard requirements.

A penetration test is a test in which a white hacker attacks a network, system, software, etc., and it is possible to measure the vulnerability of the test target and its exploitability.

In the IT field, it has been widely used for the purpose of knowing possible attacks and countermeasures against them. In recent years, with the progress of IoT, the number of cases where it is used in the area of embedded devices is increasing.

Benefits of Penetration Testing

Even though security testing is being used more and more in the area of embedded devices, some of those who have not been involved in security testing in the past, such as designers of embedded devices, do not understand the significance and effects of implementing security tests. I think there are many people who say no.

Here, I will briefly explain three benefits that can be obtained by conducting a penetration test.

Features of Spirent Penetration Testing

At Spirent, our team of ethical hacker consultants provide quality penetration testing. There are many test vendors that offer penetration testing, but here we will introduce the features of Spirent's testing service.

Performed by qualified and trusted consultants

Spirent has qualified companies and individual consultants.

As a company, we have an international certification called CREST. This certification is given only to organizations that provide security services that have passed regular and rigorous examinations. In addition, it is also recognized as an IoT security audit laboratory by the CTIA, an association of US carrier telecommunications companies, and has an aspect as a certified operator.

In addition, individual consultants have experience making presentations at international security conferences such as DEFCON and BlackHat, as well as members with specialized qualifications for each field, such as OSCP, CISSP, and GICSP.

Supports various interfaces and protocols of embedded devices

Spirent can test various interfaces of embedded devices, and supports industrial protocols such as OPC-UA, CC-Link, and Modbus. We have a wealth of experience in testing web applications, mobile applications, networks, etc., and we can provide total testing services to those who are considering services that utilize IoT devices in the future.

Respond to retesting after implementation of countermeasures

Spirent's proposed penetration tests have the right to be re-tested after a certain period of time.

Penetration testing is not the end of the process, but should be done as a set, fixing the threats and vulnerabilities that are found, and verifying that they are functioning properly. Spirent responds to the needs of development sites who want to "make sure security is in perfect condition before shipping" by assuming re-testing from the initial proposal stage.

Spirent test execution flow

Before conducting the test, Spirent will prepare a proposal based on the information you provide, discuss with the customer, and conduct the test that meets your request.

In addition, Spirent basically provides a retest as a set, so you can check whether the vulnerabilities found in the first test have been fixed.