Soluciones Seguras Estudios de Vulnerabilidad

Estudios de Vulnerabilidad is a professional services offering from Soluciones Seguras that performs vulnerability assessments and penetration testing engagements on client networks. Consultants examine network infrastructure from both external (internet-based) and internal attacker perspectives, testing as unprivileged, privileged, and restricted-privilege users. The service does not modify data during testing, and any information obtained is deleted upon completion. The engagement covers multiple phases: - Threat analysis of confidentiality (passive interception via sniffers), integrity (document interception/corruption), and authentication (user impersonation, repudiation) using evaluation of digital signatures, encryption, and passwords - Connectivity and route determination through ping scans, port scans, and service scans - Vulnerability auditing of operating systems and services such as NetBIOS, HTTP/CGI/WinCGI, FTP, DNS, POP, SMTP, LDAP, Windows registry services, and router/firewall configurations - Review of user account configuration and privileges, password policies, web server executables, autorun files, OS service pack levels, missing patches, unnecessary shares, and network inventory - A penetration phase attempting manual account compromise, buffer overflows, source code examination, and session hijacking using hacking tools and scripts written in C, PERL, and other languages At the conclusion, the service delivers a set of reports detailing risks found (categorized as low, medium, high), the impact of identified vulnerabilities, immediate and medium-term remediation actions, preventive safeguards, and guidance for selecting appropriate risk analysis and management techniques. Reports are written in plain language with technical details and specific recommendations placed in appendices. A quarterly cadence is recommended given the changing nature of network infrastructure.