Network Scan Diagnosis
This diagnostic checks whether common attack methods, such as external port scanners targeting the IP ports of the system in question, could be used to identify risks.
| Risk Categories | Diagnostic Details | |
|---|---|---|
| 1 | Denial-of-Service Attacks | Feasibility of DoS attacks, DDoS attacks, and other attacks that maliciously disrupt services |
| 2 | Information Theft and Leakage | The possibility of server system information, etc., being improperly obtained |
| 3 | Unauthorized Access | Possibility of unauthorized access to the server or unauthorized manipulation of the server |
| 4 | Crash | Possibility of unauthorized modification of server system files, etc. |
| 5 | Gaining root access | Potential for unauthorized acquisition of server administrative privileges |
| 6 | Full log acquisition | Potential for server configuration files and log files to be obtained |
| 7 | 100% CPU | Potential for malicious activity to increase server load |
Network Configuration Diagnosis
We will visually verify the OS and middleware settings of each server (web server/DB server) comprising the target system using root privileges.
| Verification Criteria | |
|---|---|
| 1 | Check for the presence of backdoors |
| 2 | Verification of patch application status |
| 3 | Check for Insecure OS Settings |
| 4 | Use of Default Credentials |
*We conduct assessments that are fully compliant with OWASP (Open Web Application Security Project).
Security Assessment Service Flow
Infrastructure Assessment Process
Site Verification
Please provide the IP address to be assessed.
If an on-site assessment is required, please also specify the location.
Scope Confirmation
We will coordinate the diagnosis schedule and other details.
If the on-site diagnosis is to be conducted at an IDC, please arrange for access permits and other necessary procedures.
Proposal
We will submit a proposal outlining the IP addresses to be assessed and the scope of the assessment, along with a quotation.
Application
Please fill out the required information and send us the order form.
*If access is controlled by a firewall or similar device, please allow connections from our diagnostic IP address.
Assessment
We will conduct the assessment based on the details provided in your application.
*We will evaluate the target IP using the CVSS scoring system.
Report
We will submit the assessment report within approximately 5 business days after the assessment is completed.
*We also offer a debriefing session as an optional service.
Please feel free to contact us for detailed service information