Prevention

CyanLine advises that network security be assessed from an external and an internal point-of-view. While external assessments are very important, internal assessments are also very important to ensure that internal users with some access to the network do not exceed that access.

CyanLine knows that you can't just allow anyone to assess your network security. You need to be able to trust your network security partner, and CyanLine has earned the trust of banks, government agencies and technology companies to help ensure the appropriate controls are in place.

To assist in preventing unauthorized access or disclosure of information, we provide the following services to find security issues before they are exploited:

• Network Security Audits
• Penetration Testing
• Vulnerability Assessments
• Application testing

Research

When possible, our first step is to interview the end-users, as they often knew what works and what doesn't with respect to security. We also look to the existing policy to see how effective and enforceable is realy is. We weigh how the policy impact business goals and workflows. A policy that interrupts business processes is likely to be circumvented, ultimately weakening network security.

One example of the research performed by CyanLine is the examination of Internet Network Connectivity. This research looked at the growth of the Internet through the relatively passive means of examining BGP tables.

Tools

CyanLine uses a wide variety of proprietary and open source tools, such as:
• AP-Finder for wireless assessments
• nmap for open port assessment
• nikto for web assessment
• tcpdump for traffic analysis
• and more...