{"id":3299,"date":"2020-08-14T04:50:12","date_gmt":"2020-08-14T04:50:12","guid":{"rendered":"https:\/\/www.varutra.com\/?page_id=3299"},"modified":"2022-09-14T13:11:56","modified_gmt":"2022-09-14T07:41:56","slug":"network-security-assessment-case-study","status":"publish","type":"page","link":"https:\/\/www.varutra.com\/varutravrt3\/network-security-assessment-case-study\/","title":{"rendered":"Network Security Assessment Case study"},"content":{"rendered":"

\r\n

\r\n\t\r\n\t\r\n\t
\r\n\t\t
\n\t\r\n
\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t<\/div>\r\n\t<\/div>\r\n\r\n\r\n\t\t\r\n\r\n<\/div>\r\n<\/div>\n\n\t<\/div>\r\n<\/section>\r\n\r\n
\r\n\t\r\n\t\r\n\t
\r\n\t\t
\n\t\r\n
\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t

Network Security Assessment Case Study<\/h3><\/div><\/div>\r\n\r\n
\r\n\t

About Our Client<\/h3>

Our Client is a holding banking company and offers a range of banking services covering commercial and investment banking on the wholesale side and transactional\/branch banking on the retail side. The Retail Banking segment serves retail customers through a branch network and other delivery channels, as well as through alternative delivery channels. The Bank provides its corporate and institutional clients a range of commercial and transactional banking products.<\/p>

Objective<\/h3>

The client sought Varutra for advice on securing their entire Network Infrastructure from security threats which can lead to loss in Confidentiality, Integrity and Availability (CIA) of the data. Client wanted to ensure that their Infrastructure meets all the security standards and regulations.<\/p>

The Challenge<\/h3>

Client\u2019s major business goal was to provide their customers with secure platform to manage their banking transactions. Client Network infrastructure was guarded by a Firewall which was restricting all transmitted frames. Hence, Varutra had to bypass the perimeter firewall to evaluate the target scope before starting Network Security Assessment.<\/p><\/div><\/div>\r\n\t<\/div>\r\n\r\n\r\n\t\t\r\n\r\n<\/div>\r\n\r\n

\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t

Security Standards Followed at Varutra<\/h3><\/div><\/div>\r\n\r\n
\r\n\t

Varutra\u2019s security assessment methodology is in accordance with best standards and follows guidelines from OSSTMM, OSINT, NIST, ISSAF, CIS and OWASP <\/strong> for web and mobile and SANS <\/strong>for Network Penetration Testing. Varutra follows Application Security Verification Standard (ASVS)<\/strong> which helps developers with the requirement for secure development.<\/p><\/div>\r\n\t<\/div>\r\n\r\n\r\n\t\t\r\n\r\n<\/div>\r\n<\/div>\n\n\t<\/div>\r\n<\/section>\r\n\r\n

\r\n\t\r\n\t\r\n\t
\r\n\t\t
\n\t\r\n
\r\n\r\n\t\r\n\t
\r\n\t\t\r\n
\r\n\t

Our Approach<\/h3><\/div><\/div>\r\n\r\n
\r\n\t

Varutra\u2019s methodology involves assessing the security posture of the critical servers and networking devices to find out vulnerabilities to check the security of server systems from an attacker\u2019s point of view; specifically, as an internet malicious user, and determine if the hosts could be compromised to gain access impacting Confidentiality, Integrity and Availability of data.<\/p>