The security audit covers a range of analyses and tests checking security of any application.
Web applications
The offer covers testing of the applications for its vulnerability to the following group of attacks:
- Cross Site Scripting and similar,
- SQL Injections,
- XML Injections,
- race conditions,
- session implementation errors,
- Denial of Service (DoS),
- other, typical to specific implementation environments.
Besides white box testing, there is also possibility to perform penetration tests.
source code of any applications
other source code analysis:
- memory safety violations (e.g. buffer overflows) in C/C++,
- race conditions,
- input validation,
- Denial of Service (DoS),
- other vulnerabilities, typical in specific environments,
Computer forensics
break-in analysis
- reveal break-in method,
- reveal access level acquired by attacker and performing risk analysis,
- reveal possibility of attacking other resources,
- reveal what informations have been compromised,
- gathering evidence for further use in court,
- depict detailed raport,
- hardening of IT systems if desired,