How Ethical Hacking is Healthy for Business
•Descargar como PPTX, PDF•
1 recomendación•929 vistas
The easiest and most accurate way to discover if a business is protected enough to withstand a hack is to test it through the eyes of an (ethical) hacker. Ethical hackers, or penetration testers, act as computer detectives who manually examine a business environment for exploitable weaknesses. This presentation will discuss the importance of ensuring a business network receives the security check-ups it requires to maintain a healthy security posture.
Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Destacado
Similar a How Ethical Hacking is Healthy for Business
Similar a How Ethical Hacking is Healthy for Business (20)
Más de SecurityMetrics
Más de SecurityMetrics (20)
Último
Último (20)
How Ethical Hacking is Healthy for Business
- 1. Ethical Hacking is Healthy for Business
- 2. Is your company prepared for a situation like this?
- 4. If you had your website, networks, and servers ethically hacked, you probably wouldn’t be in this situation.
- 5. Let’s talk about hackers
- 6. There are 2 types of hackers. Malicious Ethical
- 7. Malicious hackers look to exploit weaknesses in a computer or network to steal company or customer information.
- 8. Ethical hackers are hired by a company to find weaknesses in that company’s environment. Ethical hackers are also called penetration testers.
- 9. The point? Find the weaknesses malicious hackers would use to gain access to company data, and help companies fix the problem!
- 10. Ethical hackers simulate real scenarios. For example: – Hackers that want to steal credit card information – Unethical competitors looking for company secrets – Disgruntled employees who want to deface a company website
- 11. What kind of tests do they conduct? • • • • • Internal/external testing Web application testing Remote access testing Wireless testing Social engineering
- 12. After testing, penetration testers provide: – Report on all vulnerabilities – Assistance to fix the found vulnerabilities
- 13. Why get a penetration test? Here are 6 reasons.
- 14. 1 It’s required (PCI DSS requirement 11.3)
- 15. 2 To test your products or website for security failures Did you know more than 79% of data breach victims possess an easily exploitable weakness? -Verizon
- 16. 3 To properly allocate security funds
- 17. To test incident response and security awareness of staff 4
- 18. 5 So you don’t end up on the front page
- 19. Because hackers become more sophisticated in the ways they steal data. 6 They adapt as fast as technologies improve.
- 20. Most breaches are preventable.
- 21. Why can hackers get in so easily? • Favoring functionality over security • Insecure software development • Incorrect configuration • Lack of staff security education • Gaps in accountability
- 22. 3 Best Practices Implement secure controls and conduct security awareness training Implement a strict policy for code development & testing Get ethically hacked!
- 23. Need to be ethically hacked? audits@securitymetrics.com 801.705.5656
Notas del editor
- Emphasize that I am using the terminology outside of their technical definitions. These terms are commonly used in the media and well-known to the public at large.
- I can’t speak for all penetration testing departments, but I know what SM gives you.
- Vulnerability scans locate potential vulns, pen testers shows tells you what an exploitable vuln is (a REAL weakness)
- In the past 10 months, what newsworthy businesses have been hacked that could have prevented their hack with a pen test?Similar risks to what a pen test can find and exploit.