|
Design-Level Security
Consulting
The staff of Gray Hat Research
Corporation works closely with all management levels and
skill sets to create a comprehensive set of security
policies. Paying close attention to the corporate mission
and objectives of its clients, Gray Hat Research Corporation
identifies the security needs of the organization,
establishes a baseline bulkhead for fulfillment of those
needs, and conducts a virtual “walk-through” of a company’s
infrastructure, to identify vulnerabilities specific to the
geography, industry and workflow processes. After
implementation, Gray Hat Research Corporation leaves its
methodologies and plans with the company, to ensure active
maintenance and upgrades of the initial blueprint occur. In
addition, a corporation’s information services employees are
educated through hands-on training, not just in the upkeep
of the security design, but in the tactics and mindset of
individuals who will try to compromise it.
Physical Security
Auditing
One of the challenges of the physical
security market is the traditional organization disparity
between the management of cyber security and physical
security functions. Organizational issues surrounding
physical security must be resolved, as an integrated
approach to optimize security solutions. As such, we believe
physical security is a key element in the total security
process.
Penetration Testing
Corporations today face any
number of vulnerabilities. Card reader doors that don’t
lock. Improperly configured network devices. Disgruntled
employees. Many of these weaknesses go undiscovered until
they are exploited by a malicious individual or group. Gray
Hat Research Corporation tests the limits of a company’s
defenses by adopting the mentality of the top 10% of all
hackers or corporate espionage agents.
In addition to attempting to
compromise a network, Gray Hat Research Corporation has the
resources to perform physical security tests to determine
how vulnerable “special access areas” really are. The
results of these tests will reveal to a company what
measures are working, what vulnerabilities exist in those
measures, and how to mitigate the associated risks. These
penetration attempts are conducted based on predetermined
criteria, which range from covert (posing as an employee, a
vendor or a delivery person) to extremely overt (scaling
walls, picking locks, etc.).
|
