Cybersecurity Services

Access monitoring is the process of auditing user activity, such as logins and access to files. It records events that you choose to monitor once they happen in your network so you can monitor them for suspicious activities in real-time and have the possibility to retrieve a log of the same activities at a later date if necessary. There are two main types of access monitoring:

• direct (i.e., monitoring user activity directly); and
• indirect (i.e., monitoring audit trails).

Direct methods usually require software on each device to be installed whereas indirect methods rely solely on network-based logging mechanisms which increases the amount of overhead needed to implement but lowers costs as it does not require any software/hardware purchases beyond the initial investment for your existing infrastructure. Each method offers different levels of granularity.

A honeypot is typically a prominent hidden or protected resource where users cannot gain direct access into production systems but can be used as a way to lure and identify malicious users both in real-time and via log analysis. The honeypot strategy has a wide basis of applicability ranging from email spamming detection and elimination all the way to displaying a false prize with which to detect, and countenance successful intrusions.

An IDS attempts to detect intrusions based on specific patterns and behaviours associated with malicious adversaries. IDSs are typically devices or software applications that monitor a network or an information system for malicious activity or policy violations. Any malicious activity or violation is typically blocked until reviewed by a human and is then reported or collected centrally using a security information and event management system. Several types of IDSs exist. These include, but are not limited to, signature-based detection, anomaly-based detection, and behavior-based detection IDSs.

Log Analyses are typically performed manually by investigators looking for suspicious activities within logs that have been generated by security devices and applications on a network or information system. Despite being a reactive rather than a proactive approach to security, it can determine the nature of an attack or a botched attack attempt post hoc and can provide useful lessons for cyber-defense in the future.

Database Auditing systems monitor database tables and data sources for any changes made against application tables thus identifying unauthorised modifications or deletions related to data stored in those databases. Data poisoning has been designated as one of the biggest threats to AI systems now and in the future, thereby making Database Auditing systems a very important monitoring tool for AI systems.

In addition to Database Auditing systems, mechanisms need to be in place to prevent intrusions and attacks from occurring in order for auditing capabilities alone to validate security infrastructure effectiveness.

Social engineering (or phishing) is an attack vector that uses various techniques – such as manipulation, deception and the abuse of trust – to manipulate a person into performing actions or divulging confidential information. These attacks are not limited to computer systems, but may also be directed at personal contacts found on social media websites such as Facebook, Twitter and MySpace.

Social engineering tests are usually conducted following anti-social engineering training to find out how employees respond to social engineering tactics after having been warned against them. The goal is not only to find the number of employees that open a phishing email or answer a phishing call, but also the number of workers who actually fall for the attack.

Penetration testing entails launching hacking attacks against specific IT assets within the network in order to assess weaknesses in existing controls such as weak passwords associated with privileged accounts used for administrative purposes (a classic case where insider threats abound). In many organisations, these privileges are shared among several employees so there is little control over who actually uses them after-hours when no one else may be around who might detect unauthorised use or abuse.

Social media is an effective tool for managing and engaging with your audience. However, it can also be a security risk if your organisation’s social media accounts, or any one of its’ employees’ are not secure.

An effective way to mitigate the risk of attacks is to embed security awareness training into your organisation’s culture. Social engineering tests are conducted to find out how employees respond to social engineering tactics. The goal is not only to find the number of employees that open a phishing email, but also the number of workers who actually fall for the attack.

Our social media security testing service allows us to access your social networks using fake accounts, without being detected as bogus users. When creating the fake accounts, we select names that match the profiles of real employees in order to blend in seamlessly with other members of the company’s social sphere. We then proceed to gather data about the organisation from its employees’ public posts on Facebook, Twitter and other sites, which we use to try to gain unauthorised access to corporate servers by hijacking employee identities or otherwise taking advantage of their privileges.

Our goal is always to identify vulnerabilities that will expose your network and inform you about how you can prevent cyberattacks against your computers and servers via social media. Social media is an effective tool for managing and engaging with your audience. However, it can also be a security risk if your organisation’s social media accounts or those of its employees are not secure.

Physical security testing is conducted to find out if the building’s safety features can be bypassed or disabled by unauthorised individuals. It is a means of testing the physical, operational and environmental security of your organisation. It involves assessing door locks and windows, as well as electronic access control devices such as card readers and keypads. We also check the location of fire extinguishers, emergency exit signs, fire alarms systems and sprinklers to ensure that they are functioning properly, as well as trying to get into the building without authorisation.