PENETRATION TESTING

Penetration testing, also known as “Ethical Hacking”, can dramatically help against many security threats, including financial loss, compliance and legal issues, reputational damage, bad publicity, loss of internet trust, stock market devaluation. It can be used to attempt to circumvent the security features of a system. The purpose of penetration testing is to identify methods of gaining access to a system by using tools and techniques used by attackers.

Aston Information Security consultants offer a penetration testing service and attempt to gain unauthorised access to your systems. The test will establish how effective your organisations security systems are at preventing intruders and make recommendations for improving security to prevent competitors, hackers and any other third party accessing the corporate network.

Using the up-to-date techniques and technologies, our services involve far more than simply inspecting the network for weaknesses. Utilising our own tools as well as the same methods and tools as hackers, Aston's technical consultants provide an efficient method of identifying any weaknesses that need strengthening.

Our services can include:-
  Testing Network security - assessing computer system security, from both external and internal perspectives.

  Wireless network testing - attempting to access additional networks to identify security weak spots.

  Remote access and remote/home worker security - assessing security vulnerabilities around laptop security, home and remote worker security, DMZ (demilitarised zone), VPN security and access to remote servers are considered

  Staff testing - using social engineering techniques, assess unauthorised physical entry controls, impersonation and divulging passwords

  Telephone exchange tests - attempt to access the telephone system, answer machines and mobile phones to identify insecure or rogue devises.

  Web applications - test resilience and security of e-commerce sites as well as PCI standard compliance.

  Computer Forensics - the computer forensics team have extensive experience in the handling and analysis of computer data evidence to support criminal convictions as well as aiding to learn from post incidents.