Home

In their own words

We have been pleasantly surprised with the excellent performance of the eSharing Software Quality Assurance team. As a result, we have expanded our business with them and awarded them additional projects.

Shannon N. Chenault
Vice President, Finance
Syncronus Corporation
 

eSharing has instituted the Going Green initiative by supporting and adopting environmentally-friendly technologies and products


logo_goinggreen-(1).png    logo_energy.png    logo_afdc.gif

Vulnerability Assessments and Penetration Tests

Over the years, eSharing has acquired significant experience in the electronic and network security field. Our aim is to protect your environment from external and internal threats. Your corporate data and infrastructure are safeguarded from harm and tampering by designing and implementing adequate security solutions.

eSharing's Advanced Security Services include:

  • Internal Vulnerability Assessment
  • Internal Penetration Testing
  • External Penetration Testing

Internal Vulnerability Assessment

The eSharing Internal Vulnerability Assessment identifies and verifies the current network and host vulnerabilities in the systems on your network. This process provides an in-depth understanding of security-related weaknesses and exposures in the IT environment.

eSharing conducts an Internal Vulnerability Assessment to determine the difference between the assessed equipment and the commissioned equipment list that you provide.

eSharing’s Internal Vulnerability Assessment identifies known and potential vulnerabilities in different layers of a computer/server system such as operating systems vulnerabilities, installed applications vulnerabilities and installed services vulnerabilities such as Web servers, DNS, DHCP, as well as  vulnerabilities in the network node devices and security node devices.

The Internal Vulnerability Assessment is conducted inside your facilities, and the following networking components are in scope include Firewalls, Routers, Switches, Servers, Hosts, and more.

Internal Penetration Testing

The eSharing Internal Penetration Test consists of the following tasks:

  • Internal Network Scanning
  • Port Scanning
  • System Fingerprinting
  • Services Probing
  • Exploit Research
  • Manual Vulnerability Testing and Verification
  • Manual Configuration Weakness Testing and Verification
  • Limited Application Layer Testing
  • Firewall and ACL Testing
  • Administrator Privileges Escalation Testing
  • Password Strength Testing
  • Network Equipment Security Controls Testing
  • Database Security Controls Testing
  • Internal Network Scan for Known Trojans
  • Third-Party/Vendor Security Configuration Testing

External Penetration Testing

The eSharing External Penetration Test consists of the following tasks:

  • Network Foot Printing
    • Internet Presence Mapping
    • Social Engineering
    • Dumpster Diving
  • Wireless Hacking
  • Discovery and Probing
  • Enumeration
  • Testing and Evading network-filtering devices
    • Intrusion Detection Systems
    • Firewalls
    • Honeypots
  • Vulnerability identification and verification
  • Exploiting for known vulnerabilities
  • System Hacking
  • Denial of Service and Distributed Denial of Service Simulation
  • Penetrating Physical Security Controls

Upon completion of the Vulnerability Assessments and Penetration Tests services, eSharing delivers proper documentation containing the following components:

  • Executive summary including a high level summary of the analysis and findings in addition to a prioritized action plan for remediation
  • Management summary including objectives and process information
  • High level assessment of the information security measures currently applied in the Organization compared with industry best practices
  • Examination and high level analysis of discovered security issues, identification and classification level of effort to exploit, evaluation of business impact, and recommendation for remediation
  • List of prioritized recommendations needed for the security enhancement and risk reduction
  • List of appendices demonstrating the relevant evidences generated through the use of various security used during the security assessment 

If you are interested in any of our IT Services, please fill out our Information Request Form.


Microsoft_Gold_Partner_rgb_Compentencies.png

 

Related Links
seperator.gif

Customer Relationship Management (CRM)


Microsoft Dynamics is a line of integrated, adaptable business management solutions that enable your people to make important business decisions with greater confidence. Improve the 360-degree view of your customers, ensure higher customer satisfaction, and increase your sales performance.


LCD and LED Monitors and Televisions


Samsung products include LCD and LED monitors, laptops, and televisions


Computer Servers & Laptops


Reduced budgets mean IT departments need to become more flexible, and it’s not just about hardware. It’s also about solutions.


Unified Threat Management


Fortinet is a leading worldwide provider of Unified Threat Management (UTM) network security solutions. Fortinet UTM solutions enable customers to cost-effectively defend against current and next generation network and application layer threats without slowing down their networks.