8

Pen test pavol.luptak

Embed Size (px)

Citation preview

Page 1: Pen test pavol.luptak
Page 2: Pen test pavol.luptak
Page 3: Pen test pavol.luptak
Page 4: Pen test pavol.luptak

1BHF � IUUQ���QFOUFTUNBH�DPN��������

3(17(67,1*�,1�$6,$3HQHWUDWLRQ�7HVWLQJ�LQ�,QGRQHVLD��$�&DVH�6WXG\E\�6HPL�<XOLDQWR

7KH� ,QGRQHVLDQ� &HQWUDO� %DQN� �%DQN� ,QGRQHVLD�� KDG�

UHOHDVHG� WKH� QDWLRQDO� UHJXODWLRQ� ZKLFK� LQFOXGHV� SROLF\�

DQG�SURFHGXUHV� UHJDUGLQJ� WKH�SURWHFWLRQ�RI� LQIRUPDWLRQ�

DVVHWV� EDVHG� RQ� 5LVNV�� 7KLV� UHJXODWLRQ� KDV� EHHQ�

WULJJHULQJ� WKH� ,QIRUPDWLRQ� 6HFXULW\� $ZDUHQHVV� LQ�

,QGRQHVLD¶V�EDQNLQJ�LQGXVWU\��,W�LV�VWDWHG�WKDW�EDQNV�DQG�

RWKHU�ILQDQFLDO�LQVWLWXWLRQV�KDYH�WR�FRQGXFW�YXOQHUDELOLW\�

DVVHVVPHQW� DQG� SHQHWUDWLRQ� WHVWLQJ� DW� PLQLPXP� RQFH�

HYHU\� WKUHH�\HDUV� LQ�RUGHU� WR�SURWHFW�DQG�PDLQWDLQ� WKHLU�

FULWLFDO� LQIRUPDWLRQ� DVVHWV� IURP� FXUUHQW� DQG� IXWXUH�

WKUHDWV�

,QWHUYLHZ�ZLWK�+DULVK�7KDNUDOE\�3HQ7HVW�7HDP

+DULVK�7KDNUDO�LV�WKH�'LUHFWRU�RI�,QIRUPDWLRQ�6HFXULW\�IRU�

7HFK%KDUDW� &RQVXOWLQJ� ZLWK� �� \HDUV� RI� H[SHULHQFH� DQG�

DFKLHYHPHQW�DFURVV�WKH�ZKROH�VSHFWUXP�RI�PDQDJHPHQW�

DVSHFWV� RI� ,QIRUPDWLRQ�6HFXULW\��$SDUW� IURP�FRQGXFWLQJ�

WUDLQLQJ� KLV� H[SHUWLVH� LQFOXGHV� GHVLJQ�� LPSOHPHQWDWLRQ�

�PDQDJHPHQW�QHWZRUNV� FRQVLVWLQJ�RI�:LQGRZV��/LQX[�

HWF�� &XUUHQWO\�� KH� FRQGXFWV� WUDLQLQJ� IRU� (&�&RXQFLO�

DQG� RWKHU� WUDLQLQJV�� +LV� UROH� DOVR� LQFOXGHV� ZRUNLQJ�

ZLWK� WKH� WHFKQLFDO� WHDP� IRU� 9XOQHUDELOLW\�$VVHVVPHQW��

3HQHWUDWLRQ�7HVWLQJ�

3(17(67,1*�%86,1(66,QWHUYLHZ�ZLWK�-HURPLH�-DFNVRQE\�3HQ7HVW�7HDP

0U��-HURLH�-DFNVRQ�LV�D�VHDVRQHG�VHFXULW\�H[SHUW�ZLWK�RYHU�

��� \HDUV� RI� H[SHULHQFH� OHDGLQJ� VHFXULW\� FRQVXOWDQFLHV�

SURYLGLQJ�LQIRUPDWLRQ�VHFXULW\�VHUYLFHV�IRU�)RUWXQH������

ODUJH�HQWHUSULVH��DQG�PLG�VL]HG�EXVLQHVVHV��$�ZHOO�NQRZQ�

VSHDNHU�� 3UHVLGHQW� RI� WKH� 6DQ� 'LHJR� 2:$63� &KDSWHU��

6$16� 0HQWRU�� DQG� SUHYLRXV� 9LFH� 3UHVLGHQW� RI� WKH� 6DQ�

'LHJR�,6$&$�&KDSWHU��0U��-DFNVRQ�LV�ZHOO�QHWZRUNHG�

3HQHWUDWLRQ�7HVWLQJ�±�&RQWLQXRXV�GHPDQG�RXWZHLJKV�VXSSO\E\�+DULVK�3DUPDU

3HQHWUDWLRQ�7HVWLQJ�KDV�EHHQ�DQ�DUHD�ZKHUH�GHPDQG�KDV�

RXWZHLJKHG�VXSSO\�LQ�UHFHQW�\HDUV�DQG�WKLV�LV�JUDGXDOO\�

LQFUHDVLQJ�� 7KLV� LV� D� UHVXOW� RI� H[LVWLQJ� 3HQHWUDWLRQ�

7HVWLQJ� FRQVXOWLQJ� EXVLQHVVHV� DJJUHVVLYHO\� KLULQJ� DQG�

D� UHDO� VXUJH� LQ� RWKHU� FRPSDQLHV� HQWHULQJ� WKLV� PDUNHW�

DQG� UHTXLULQJ� H[SHULHQFHG� 3HQHWUDWLRQ� 7HVWHUV� WR� KHOS�

HVWDEOLVK�WKHPVHOYHV�LQ�WKLV�YHU\�DFWLYH�VSDFH�

FRQVHUYDWLYH� EXVLQHVVHV�� D� QHZ� WUHQG� LV� GHYHORSSLQJ�

E\�ZKLFK�RUJDQL]DWLRQV�FUHDWH�WKH\�RZQ�LQWHUQDO�WHDP�RI�

SHQWHVWHUV��7KLV�DUWLFOH�FRYHUV�VRPH�RI�WKH�PRWLYDWLRQ�IRU�

VXFK�RUJDQL]DWLRQV�WR�JR�WKLV�URXWH��DV�ZHOO�DV�VRPH�RI�

WKH�FKDOOHQJHV�DORQJ�WKH�ZD\�

&21)(5(1&(6¶�63($.(5,QWHUYLHZ�ZLWK�(UGDO�2]ND\DE\�3HQ7HVW�7HDP

(UGDO� 2]ND\D� LV� WKH� IRXQGHU� DQG� 6HQLRU� 0LFURVRIW�

,QVWUXFWRU�RI�&(2�,7�7UDLQLQJ��ZKLFK�KDV�QRZ�PHUJHG�ZLWK�

)DVW�/DQH�$VLD�3DFLILF��RQH�RI�$XVWUDOLD¶V�6LOYHU�FHUWLILHG�

0LFURVRIW�/HDUQLQJ�3DUWQHUV��

(UGDO� WUDYHOV� DFURVV� $XVWUDOLD� WHDFKLQJ� ,7� ZRUNVKRSV�

DQG�KDV�VHUYHG�DV�3URMHFW�0DQDJHU�(QJLQHHU�IRU�VHYHUDO�

ODUJH�RUJDQLVDWLRQV� LQ�$XVWUDOLD��&KLQD��3KLOLSSLQHV� DQG�

WKH�86$�

,QWHUYLHZ�ZLWK�3HWHU�:RRGE\�3HQ7HVW�7HDP

3HWHU� :RRG� LV� D� ZRUOG�UHQRZQHG� VHFXULW\� HYDQJHOLVW��

VSHDNLQJ�DW�FRQIHUHQFHV�DQG�VHPLQDUV�RQ�HWKLFDO�KDFNLQJ�

DQG�VRFLDO�HQJLQHHULQJ��+H�KDV�DSSHDUHG�LQ�GRFXPHQWDULHV�

IRU� %%&� WHOHYLVLRQ�� SURYLGHG� FRPPHQWDU\� RQ� VHFXULW\�

LVVXHV� IRU� 79� DQG� UDGLR� DQG� ZULWWHQ�PDQ\� DUWLFOHV� RQ� D�

YDULHW\� RI� VHFXULW\� WRSLFV�� +H� KDV� DOVR� EHHQ� UDWHG� WKH�

%ULWLVK�&RPSXWHU�6RFLHW\¶V�QXPEHU�RQH�VSHDNHU�

,19(670(17�,1�,7�6(&85,7<$�%XVLQHVV�1HHG�7R�6XFFHVVE\�0DQXHO�&DVWUR

3HQHWUDWLRQ�7HVWLQJ�LV�D�ZLGH�WHUP�DQG�DOVR�KDV�GLIIHUHQW�

SRLQWV�RI�YLHZV�DFFRUGLQJ�WR�VHFXULW\�H[SHUW¶V�VWDWHPHQWV��

WKH�PRVW�FRQVHUYDWRUV�DJUHH�WKDW�LV�HVVHQWLDO�WR�SHUIRUP�

LW� FRQWLQXRXVO\�DQG� LI� \RX� IDLO� RQ� WKLV�GXW\�\RX�PD\�VLW�

DQG�ZDLW� WKH�SXQLVKPHQWV�RI�KHOO��RWKHUV� MXVW� WKLQN� LV�D�

ZDVWH�RI�WLPH��8QGHU�P\�FRQFHUQ�SHQHWUDWLRQ�WHVWLQJ�LV�D�

ORW�PRUH�FRPSOH[�WKDQ�VWDWH�DQ�RSLQLRQ�

3(17(67,1*�,1�(8523(,QWHUYLHZ�ZLWK�3DYRO�/XSWiNE\�3HQ7HVW�7HDP

3DYRO�/XSWiN�JDLQHG�KLV�%6F��DW�WKH�)(,�678�LQ�%UDWLVODYD�

DQG� 06F� LQ� &RPSXWHU� 6FLHQFH� DW� WKH� &]HFK� 7HFKQLFDO�

8QLYHUVLW\� ZLWK� PDVWHU� WKHVLV� IRFXVHG� RQ� XOWUD�VHFXUH�

V\VWHPV��+H�KROGV�PDQ\�SUHVWLJLRXV�VHFXULW\�FHUWLILFDWLRQV�

LQFOXGLQJ� &,663� DQG� &(+�� KH� LV� 6ORYDN� 2:$63� FKDSWHU�

OHDGHU��FR�IRXQGHU�RI�3URJUHVVEDU�DQG�62,7�RUJDQL]DWLRQV�

ZKHUH�KH�LV�UHVSRQVLEOH�IRU�,7�VHFXULW\��

&217(176

��

��

��

��

��

��

��

��

Page 5: Pen test pavol.luptak

3(17(67,1*�,1�(8523(

1BHF �� IUUQ���QFOUFTUNBH�DPN��������

8IFO�EJE�ZPV�EFDJEF�UP�CJOE�ZPVS�GVUVSF�XJUI�*5�TFDVSJUZ 3DYRO�/XSWiN��:KHQ�,�ZDV�����GXULQJ�P\�VWXGLHV�DW�WKH�

8QLYHUVLW\�,�GLVFRYHUHG�WKH�PDJLF�RI�8OWUL[��'LJLWDO�8QL[�

DQG�,5,;����0\�ILUVW�EUXVK�ZLWK�,7�VHFXULW\�ZDV�ZLWK�EXIIHU�

RYHUIORZV�DQG�$OHSK��VKHOOFRGH�LQ������

$BO�ZPV�HJWF�FYBNQMFT�PG�DIBMMFOHFT�UIBU�ZPV�GPVOE�UIF�NPTU�EFNBOEJOH�BU�UIF�CFHJOOJOH�PG�ZPVS�DBSFFS 3/�� 6ORYDNLD� ZDV� DQG� VWLOO� LV� D� VPDOO� PDUNHW� IRU� ,7�

VHFXULW\��HVSHFLDOO\�SHQHWUDWLRQ�WHVWLQJ��7KH�VLWXDWLRQ�LV�

D�ELW�EHWWHU�LQ�WKH�&]HFK�5HSXEOLF��0RVW�6ORYDN�&]HFK�

*OUFSWJFX�XJUI�

1BWPM�-VQUÈL

1BWPM�-VQUÈL�HBJOFE�IJT�#4D��BU�UIF�'&*�456�JO�

#SBUJTMBWB�BOE�.4D�JO�$PNQVUFS�4DJFODF�BU�UIF�

$[FDI�5FDIOJDBM�6OJWFSTJUZ�XJUI�B�NBTUFS�T�UIFTJT�

GPDVTFE�PO�VMUSB�TFDVSF�TZTUFNT��)F�IPMET�NBOZ�QSFTUJHJPVT�TFDVSJUZ�

DFSUJGJDBUJPOT�JODMVEJOH�$*441�BOE�$&) �)F�JT�B�4MPWBL�08"41�DIBQUFS�

MFBEFS �DP�GPVOEFS�PG�1SPHSFTTCBS�BOE�40*5�PSHBOJ[BUJPOT�XIFSF�IF�

JT�SFTQPOTJCMF�GPS�*5�TFDVSJUZ��1BWPM�IBT�HJWFO�SFHVMBS�QSFTFOUBUJPOT�

BU�WBSJPVT�XPSMEXJEF�TFDVSJUZ�DPOGFSFODFT�JO�UIF�/FUIFSMBOET �

-VYFNCPVSH �#FSMJO �8BSTBX �,SBLPX �BOE�1SBHVF��*O�UIF�QBTU �IF�IBT�

EFNPOTUSBUFE�WVMOFSBCJMJUJFT�JO�UIF�QVCMJD�USBOTQPSU�4.4�UJDLFUT�JO�

BMM�NBKPS�DJUJFT�JO�&VSPQF �UPHFUIFS�XJUI�IJT�DPMMFBHVF�/PSCFSU�4[FUFJ �

IF�EFNPOTUSBUFE�WVMOFSBCJMJUJFT�JO�.JGBSF�$MBTTJD�3'*%�DBSET��)F�IBT�

���ZFBST�PG�FYQFSJFODF�JO�*5�TFDVSJUZ �QFOFUSBUJPO�UFTUJOH�BOE�TFDVSJUZ�

BVEJUJOH�JODMVEJOH�TPDJBM�FOHJOFFSJOH�BOE�EJHJUBM�GPSFOTJD�BOBMZTJT��)F�

JT�DP�BVUIPS�PG�UIF�08"41�5FTUJOH�(VJEF�W� �IBT�B�EFFQ�LOPXMFEHF�

PG�UIF�0445.. �*40������������BOE�NBOZ�ZFBST�PG�FYQFSJFODF�JO�

FYQMPSJOH�BOE�EJTDPWFSJOH�WVMOFSBCJMJUJFT��)F�IBT�LOPXMFEHF�PG�NBOZ�

QSPHSBNNJOH�MBOHVBHFT�"4. �$ �$�� �94-5 �1FSM �+BWB �1-42- �-JTQ �

1SPMPH �TDSJQUJOH�MBOHVBHFT�BOE�PQFSBUJOH�TZTUFNT��)F�JT�BMTP�GPDVTFE�

PO�7P*1�BOE�TPNF�JOUFSFTUJOH�*5�TFDVSJUZ�SFTFBSDI��1(1�LFZ��4.*.&�LFZ �

-JOLFE*O�1SPGJMF�

Page 6: Pen test pavol.luptak

��������

FRPSDQLHV�DQG�RUJDQL]DWLRQV�VLPSO\�GLG�QRW�FDUH�DERXW�

WKH�QRWLRQ�RI�,7�VHFXULW\��:LWK�WKH�FRPSXWHUL]DWLRQ�RI�WKH�

VRFLHW\� DQG� SURSDJDWLRQ� RI� WHFKQRORJLHV� LQ� HYHU\GD\�

EXVLQHVV�LQGLYLGXDO� OLIH�� WKH� ,7� VHFXULW\� EXVLQHVV�

EHFRPHV�PXFK�PRUH�LPSRUWDQW�DQG�YDOXHG�

8IBU�JOTQJSFE�ZPV�UP�TUBSU�/FUIFNCB �$BO�ZPV�UFMM�VT�NPSF�BCPVU�ZPVS�DPNQBOZ 3/�� )UHHGRP� DQG� LQGHSHQGHQFH� ZHUH� GHILQLWHO\�

UHDVRQV�WR�VWDUW�P\�RZQ�FRPSDQ\��,�ZDV�VLPSO\�WLUHG�RI�

ZRUNLQJ�IRU�FRUSRUDWLRQV�ZLWK�FRPSOLFDWHG�EXUHDXFUDWLF�

SURFHVVHV�DQG�RYHUKHDG��$QG�EHFDXVH�,�ZDQWHG�WR�VWD\�

LQ� WKH� ,7�VHFXULW\� ILHOG�� ,�GHFLGHG� WR�FUHDWH�P\�RZQ� ,7�

VHFXULW\�FRPSDQ\�

0D\EH� WKLV� LV�QRW� IRU�HYHU\RQH��EXW� ,� WKLQN� IUHHGRP�

DQG� LQGHSHQGHQFH� LV� DQ� LQHYLWDEOH� FRPSRQHQW� RI�

KDSSLQHVV� IRU� SHRSOH� WRGD\�� VR� ,� VXJJHVW� \RX� OHDYH�

\RXU� IXOOWLPH� MRE� DQG� VWDUW� WR� ZRUN� IRU� FRQWUDFW�� RU�

FUHDWH�\RXU�RZQ�FRPSDQ\�DQG�FKDQFHV�DUH�� \RX�ZLOO�

EH�KDSS\�VRRQ���

1HWKHPED�LV�D�6ORYDN�,7�VHFXULW\�FRPSDQ\�IRXQGHG�

LQ� ������ SULPDULO\� IRFXVHG� RQ� WKH� ZHE� DSSOLFDWLRQ�

VHFXULW\� DQG� SHQHWUDWLRQ� WHVWV� ZLWK� MXVW� ILYH� VHFXULW\�

JHHNV�DW�WKH�PRPHQW��2XU�EURDG�SRUWIROLR�WULHV�WR�FRYHU�

DOO�DVSHFWV�RI�WHFKQLFDO�VHFXULW\�LQFOXGLQJ�LQWUDQHW�DQG�

ORFDO�V\VWHP�VHFXULW\�DXGLWV�� IRUHQVLF�GLJLWDO�DQDO\VLV��

ZLUHOHVV� QHWZRUNV� DXGLWV�� VHFXUH� 9R,3� VROXWLRQV� DQG�

KDUGHQLQJ�V\VWHPV�

���%P�ZPV�PQFSBUF�POMZ�PO�UIF�4MPWBL�NBSLFU �8IBU�JT�UIF�QPMJDZ�PG�ZPVS�DPNQBOZ 3/�� $W� WKLV� PRPHQW� ZH� RSHUDWH� RQ� ERWK� 6ORYDN�

DQG� &]HFK� PDUNHW�� :H� DOVR� KDYH� VRPH

FXVWRPHUV�LQ�WKH�86�

5HJDUGLQJ� RXU� SROLF\�� ,7� VHFXULW\� LV� RXU� SDVVLRQ�� ,W�

LV�QRW� MXVW�D�ZRUN� IRU�XV��VR�ZH�DUH�YHU\�HQWKXVLDVWLF�

DQG� WU\� WR� JR� LQWR� WKH� GHSWK�� ,7� VHFXULW\� LV� DOZD\V�

DERXW� WUXVW�DQG�ZH�DUH�DZDUH�RI� WKLV� IDFW��:H�VWULFWO\�

IROORZ�WKH�FRGH�RI�HWKLFV�DQG�ZRUN�WR�PDLQWDLQ�D�JRRG�

UHODWLRQVKLS�ZLWK�DOO�RI�RXU�FXVWRPHUV��3HQ�WHVWLQJ�DQG�

,7�VHFXULW\�DXGLWLQJ� LV�RXU�FRUH�EXVLQHVV��VR�ZH�ZDQW�

WR�RIIHU�WKHVH�VHUYLFHV�WR�RXU�FXVWRPHUV�QRW�DV�D�RQH�

WLPH�RIIHULQJ��EXW�DV�SDUW�RI�D�UHJXODUL]HG�SURFHVV�

)PX�EP�ZPV�TFF�*5�NBSLFU�JO�UIJT�QBSU�PG�&VSPQF�4MPWBLJB �$[FDI �1PMBOE �FUD� 3/��7KH�,7�VHFXULW\�PDUNHW�MXVW�UHIOHFWV�WKH�GHYHORSPHQW�

RI�,7�LQGXVWU\�LQ�HYHU\�FRXQWU\��VR�LW�LV�ELJ�LQ�WKH�8.�DQG�

PD\EH�3RODQG�DQG�VPDOO�LQ�6ORYDNLD��

,�VHH�VLJQLILFDQW�EXVLQHVV� LVRODWLRQ�EHWZHHQ�$XVWULD�

DQG�6ORYDNLD��,I�WKH�$XVWULDQ�FRPSDQ\�LV�ORRNLQJ�IRU�D�

SHQHWUDWLRQ�WHVWLQJ�FRPSDQ\��LW�WULHV�WR�ILQG�LW�LQ�$XVWULD��

,I�LW�IDLOV��LW�WULHV�WKH�*HUPDQ�PDUNHW��,I�LW�VWLOO�IDLOV��LW�WULHV�

Page 7: Pen test pavol.luptak

3(17(67,1*�,1�(8523(

1BHF �� IUUQ���QFOUFTUNBH�DPN��������

WKH�6ZLVV�PDUNHW��DQG�WKHQ�PD\EH�D�86�RU�8.�EDVHG�

FRPSDQ\��EXW�QRW�D�6ORYDN�RQH��$QG�\HV��WKH�GLVWDQFH�

EHWZHHQ�%UDWLVODYD�DQG�9LHQQD�LV�RQO\����NP�

2Q�WKH�RWKHU�KDQG��WKH�UHODWLRQVKLS�EHWZHHQ�&]HFK�

DQG�6ORYDN� ,7� VHFXULW\� FRPSDQLHV� LV� SHUIHFW�� 7KLV� LV�

PD\�EH�DOVR�D�UHDVRQ�ZK\�ZH�KDYH�PRUH�FXVWRPHUV�LQ�

&]HFK�5HSXEOLF�WKDQ�LQ�6ORYDNLD�QRZ�

:PV�TQFDJBMJ[F�JO�QFOFUSBUJPO�UFTUJOH��8IBU�NBLFT�ZPVS�DPNQBOZ�VOJRVF�PO�UIF�NBSLFU 3/��$W� OHDVW� LQ�&]HFK�6ORYDN�PDUNHW�ZH�DUH�XQLTXH�LQ�

SURYLGLQJ�

��� 6PDUW�FDUG�5),'�VHFXULW\�DXGLWV

��� 6$3�SHQHWUDWLRQ�WHVWLQJ

��� $FWLYH� VHFXULW\� UHVHDUFK� �GHPRQVWUDWHG� E\� RXU�

UHJXODU�SUHVHQWDWLRQ�DW�ZRUOGZLGH�FRQIHUHQFHV�

��� 6SRQVRUHG� VHFXULW\� UHVHDUFK� �\HV�� ZH� ILQDQFLDOO\�

VXSSRUW� \RXU� UHVHDUFK� DQG� GHYHORSPHQW� RI� PDQ\�

RSHQ�VRXUFH�VHFXULW\�FUDFNLQJ�WRROV��

)PX�XPVME�ZPV�BEWJTF�DPNQBOJFT�UIBU�BSF�MPPLJOH�GPS�HPPE�QFO�UFTUJOH�TFSWJDFT 3/��$VN�IRU�

��� (WKLFDO�UHTXLUHPHQWV

��� GR� QRW� EH� H[WRUWHG� E\� SHQWHVWLQJ� FRPSDQLHV�

WKDW� FODLP� WR� UHYHDO� ÄFULWLFDO� YXOQHUDELOLWLHV´� LQ�

\RXU� LQIRUPDWLRQ� V\VWHP� DQG� WKHQ� IRUFH� \RX� WR�

RUGHU�DQG�SD\�IRU�WKHLU�SHQHWUDWLRQ�WHVW��,W�LV�MXVW�

EODFNPDLO�

��� GRHV� WKLV� SHQWHVWLQJ� FRPSDQ\� IROORZ� D�

UHVSRQVLEOH�VHFXULW\�GLVFORVXUH"

��� PXWXDO� 1'$� DQG� FRPSUHKHQVLYH� VHFXULW\�

DVVHVVPHQW� FRQWUDFW� VKRXOG� EH� D� PDWWHU� RI�

FRXUVH

��� 5HSXWDEOH�UHIHUHQFHV�±�ZKLFK�\RX�DUH�DEOH�WR�YHULI\

��� 3HQ�WHVW� UHODWHG� FHUWLILFDWHV� �*3(1�� &:$37��

&(37��&(+��(&6$��/37��±�GR�QRW�DVN� IRU�&,663�

RU� &,6$�� WKHVH� FHUWLILFDWHV� DUH� XVXDOO\� DEVROXWHO\�

XVHOHVV�IRU�SHQWHVWLQJ�

��� 6DPSOH� ILQDO� UHSRUWV� ±� FKHFN� IRU� FXVWRP�PDGH�

H[SORLWV�DQG� WKH�H[SORLW�RI�QRQ�WULYLDO�YXOQHUDELOLWLHV�

���

��� 0DQXDO�LQVSHFWLRQ�±�WKLV�LV�SUREDEO\�WKH�EHVW�ZD\�WR�

YHULI\� WKHLU� GHHS� NQRZOHGJH� RI� SHQ�WHVWLQJ� ±� GRHV�

WKLV�FRPSDQ\�GR�PDQXDO�LQVSHFWLRQ�RU�WKH\�MXVW�UXQ�

DXWRPDWHG�SRUW�ZHEDSSVHF�VFDQQHUV"

��� &RQWULEXWLRQ� WR� WKH� ,7� VHFXULW\� FRPPXQLW\� ±� LW�

LV� D� JRRG� LGHD� WR� SUHIHU� WKH� SHQWHVW� FRPSDQLHV�

ZKRVH� HPSOR\HHV� DUH� ZHOO�NQRZQ� LQ� WKH� ,7�

VHFXULW\�FRPPXQLW\�DQG�DVN�IRU�WKHVH�SHRSOH�LI�LW�LV�

SRVVLEOH�

)PX�EP�ZPV�SFDSVJU�QFO�UFTUFST �8IBU�EP�ZPV�MPPL�GPS�JO�QPUFOUJBM�QFO�UFTUFST 3/��$OO� RXU�SHQ�WHVWHUV�DUH� ORQJWLPH� IULHQGV�ZKR� WUXVW�

HDFK� RWKHU�� ,Q� WKH� SDVW� ZH� WULHG� WR� UHFUXLW� UDQGRP�

SHRSOH�� EXW� LW� GLG� QRW�ZRUN�� ,Q� WKH� FDVH� RI� KLULQJ� QHZ�

HPSOR\HHV�ZH�ZRXOG�FKRRVH�IURP�RXU�H[LVWLQJ�IULHQGV�

RU�VRPH�SHRSOH�ZKR�DUH�DOUHDG\�ZHOO�NQRZQ� LQ� WKH� ,7�

VHFXULW\�FRPPXQLW\��7KLV�LV�LQWHUHVWLQJ�LQ�RXU�FRPSDQ\�±�

EHFDXVH�RI�RXU�ORYH�RI�IUHHGRP�DQG�LQGHSHQGHQFH��RXU�

FRPSDQ\� LV� FRPSOHWHO\� GLVWULEXWHG� DQG� GHFHQWUDOL]HG�

±� DOPRVW� HYHU\� HPSOR\HH� OLYHV� LQ� D� GLIIHUHQW� FLW\�

FRYHULQJ� WKH� ZKROH� 6ORYDN�&]HFK�PDUNHW�� ,Q� RUGHU� WR�

HQVXUH� WKH� PD[LPXP� VHFXULW\�� ZH� UXQ� RXU� GHGLFDWHG�

FRPSDQ\�VHUYHUV�ZLWK�IXOO�GLVN�HQFU\SWLRQ�LQ�D�VHFXUHG�

VHUYHU�KRXVLQJ��ZH�XVH�D�9R,3�EDVHG�FDOO�FHQWHU�ZLWK�

IXOO\�HQFU\SWHG�FDOOV�DQG�ZH�XVH�3*3� IRU�RXU� LQWHUQDO�

FRPPXQLFDWLRQ�

:PV�BSF�$*441�BOE�$&)��8IBU�BSF�UIF�CFOFGJUT�PG�IBWJOH�UIFTF�DFSUJGJDBUJPOT�BOE�XIBU�PUIFS�DPVSTFT�XPVME�ZPV�SFDPNNFOE�UP�QFO�UFTUFST 3/��7R�EH�KRQHVW��ZH�KDYH�RXU�,7�VHFXULW\�FHUWLILFDWLRQV�

SULPDULO\� IRU� EXVLQHVV� UHDVRQV�� EHFDXVH� PDQ\� RI�

RXU� FXVWRPHUV� UHTXLUH� WKHP�� $QG� LW� ZRUNV�� ,W� KHOSV�

XV�ZLQ�PDQ\� WHQGHUV�DQG�VRPHWLPHV� LW� FDQ�EH�D� UHDO�

FRPSHWLWLYH�DGYDQWDJH�

,I�\RX�DUH� ORRNLQJ� IRU�VRPH�SHQ�WHVWLQJ�FHUWLILFDWHV��

FKHFN�IRU�*3(1��&:$37��&(37��&(+��(&6$��/37�

8IBU�BSF�ZPVS�QSPGFTTJPOBM�QMBOT�GPS�UIF�GVUVSF 3/��,�ZRXOG�OLNH�WR�IRFXV�PRUH�RQ�GDWD�PLQLQJ��QRW�MXVW�

IURP�WKH�VHFXULW\�SRLQW�RI�YLHZ��±�,�VHH�LW�DV�D�YHU\�JRRG�

SURVSHFWLYH�DUHD��$OVR��WR�FRYHU�PRUH�FRXQWULHV��DW�OHDVW�

LQ�&HQWUDO�(XURSH�

Page 8: Pen test pavol.luptak