{"id":3275,"date":"2020-08-13T13:33:09","date_gmt":"2020-08-13T13:33:09","guid":{"rendered":"https:\/\/www.varutra.com\/?page_id=3275"},"modified":"2022-09-14T13:17:08","modified_gmt":"2022-09-14T07:47:08","slug":"security-assessment-case-study","status":"publish","type":"page","link":"https:\/\/www.varutra.com\/varutravrt3\/security-assessment-case-study\/","title":{"rendered":"Security Assessment Case study"},"content":{"rendered":"

\r\n

\r\n\t\r\n\t\r\n\t
\r\n\t\t
\n\t\r\n
\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t<\/div>\r\n\t<\/div>\r\n\r\n\r\n\t\t\r\n\r\n<\/div>\r\n<\/div>\n\n\t<\/div>\r\n<\/section>\r\n\r\n
\r\n\t\r\n\t\r\n\t
\r\n\t\t
\n\t\r\n
\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t

Security Assessment Case Study<\/h3><\/div><\/div>\r\n\r\n
\r\n\t

About Our Client<\/h3>

The client is a major non-banking finance company (NBFC). The Company is engaged in lending and allied activities. It focuses on consumer lending, small and medium-sized enterprises (SME) lending, commercial lending, rural lending, fixed deposits and value-added services. Its consumer lending products include two-wheelers and three-wheelers finance, consumer durables finance, digital products finance, retailer finance, salaried personal loans, e-commerce consumer finance, e-commerce seller finance and home loan.<\/p>

Objective<\/h3>

The client sought Varutra for advice on securing their entire Network Infrastructure from security threats which can lead to loss in Confidentiality, Integrity and Availability (CIA) of the data. Client wanted to ensure that their Infrastructure meets all the security standards.<\/p>

The Challenge<\/h3>

Client\u2019s major business goal was to provide their customers with secure platform to manage their financial transactions. It was imperative for the Client to ensure that their application was not susceptible to technical or design flaws while providing a smooth banking experience to its customers. Hence, Varutra team to be more cautious while conducting the security assessment which won\u2019t disrupt availability of the application.<\/p>

Major concern was to secure the customer\u2019s sensitive data, client being from financial background has developed applications considering all secure configurations like SSL Pinning and root detection implemented.<\/p><\/div><\/div>\r\n\t<\/div>\r\n\r\n\r\n\t\t\r\n\r\n<\/div>\r\n\r\n

\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t

Security Standards Followed at Varutra<\/h3><\/div><\/div>\r\n\r\n
\r\n\t

Varutra\u2019s security assessment methodology is in accordance with best standards and follows guidelines from OSSTMM, OSINT, NIST, ISSAF, CIS and OWASP <\/strong> for web and mobile and SANS <\/strong>for Network Penetration Testing. Varutra follows Application Security Verification Standard (ASVS)<\/strong> which helps developers with the requirement for secure development.<\/p><\/div>\r\n\t<\/div>\r\n\r\n\r\n\t\t\r\n\r\n<\/div>\r\n<\/div>\n\n\t<\/div>\r\n<\/section>\r\n\r\n

\r\n\t\r\n\t\r\n\t
\r\n\t\t
\n\t\r\n
\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t

Our Approach<\/h3><\/div><\/div>\r\n\r\n
\r\n\t

Varutra\u2019s methodology involves assessing the security posture of the critical servers and networking devices to find out vulnerabilities (if any) to check the security of server systems from an attacker\u2019s point of view; specifically, as an internet malicious user, and determine if the hosts could be compromised to gain access impacting Confidentiality, Integrity and Availability of data.<\/p>