Education & Other Services
Security awareness training for end-users
Employers usually expect basic IT skills from their employees and attendants; however IT awareness is rarely listed among the expectations - even though it turns out that most attacks could have been prevented from being successful with the help of simple awareness training. The recipe itself is also actually quite simple: it’s not enough to have an IT security policy, the employees need to be well-aware of it and they have to stick to the rules and regulations that are to be applied.
Companies that provide regular awareness trainings have a noticeably reduced amount of security breaches, and this of course reflects in the amount of financial damage as well. Whiteshield is pleased to provide comprehensive trainings or one-on-one coaching to its clients on a regular basis.
Security awareness training for PHP developers
According to a research carried out by IBM, eliminating a security issue while still in the development phase costs 25 US dollars, while the same correction in a widely-spread application used in the production environments may reach up to 16 000 US dollars, which is – no doubt – outlandish. This amount includes items such as the damage coming from the lost clients’ trust and the possible litigation – just to mention a couple of the most crucial. Hackers mostly aim their attacks at the application-level of the three-tier infrastructure, which means that with proper overhead planning the high security risks can be mitigated if the developers are aware of the typical errors and vulnerability points that they need to look out for.
Our security awareness training for PHP developers highlights the typical errors made in the development phase and helps realize the best practice solutions and industrial security standards.
Security awareness training for system administrators
The United States Department of Defense estimates that 80% of security incidents are not reported; moreover no one precisely knows the exact rate of incidents that are never actually realized.
It is important that the system administrators are aware of the fact that malicious attackers not only come and go and regularly cross the borders of the corporate network, but they inhabit themselves, reconfigure services and open backdoors for their own purpose, and might even manage to remain invisible for weeks or even months. Our training shows tools and techniques to identify possible malicious activities in the corporate systems, teaches administrators to assess how serious the threats that they’re facing are, and lets them think outside-of-the-box.
The objective of this training is to point at soft spots typically sought by attackers and define the scope of preventive actions. We unfold tactics and explain the hackers’ approach, what is the key to carry out a successful penetration, and how the system administrators are able to efficiently mitigate these attempts.
IT Security consulting
Configuring the optimal information security level requires careful planning and management, as an under-planned implementation may result in notable risks against attacks, whilst an over-planned design gobbles up extra resources and investment from the company purse.
The main objective of our IT security consultancy is to reach the highest level of security from a specified budget or reach a specified level of security from the lowest budget. During the consultancy, all cost calculations are based on the total cost of ownership (TCO) of the software solution recommendations so that the final result will reflect the operational costs as well, and will not be limited to a one time implementation fee only.
Log analysis
It is in the interest of all companies to efficiently analyze system logs in order to obtain a financial overview of their complete IT infrastructure alongside the classical technical tendencies.
Analyzing the log files will not only anticipate system failures but reveal information about system utilization, capacity forecasting could be made, and answers could be given to IT managers for upcoming projects.
There are obvious reasons behind the fact that several economic sectors (such as finance and telecommunications) are obliged by the law to run regular analysis of their logs. Our specialists assist in selecting proper methodology and the most suitable log analysis system for your company, whilst the market offers a rich scale of choices.
Forensic assessment
Computer or network forensic assessment is used to investigate fraudulent behavior. In any case, this kind of investigation is a reactive action, and is used for reconstruction of attacks and suspected criminal activities against a clearly defined scope of victim machines.
Beyond the anatomic examination of log files, a complete low level analysis of the target hardware is also carried out (disk analysis, evidence management, data mining and restoration, etc.).