Security Testing

The growing importance of web based e-commerce systems to businesses has not been matched by the recognition of the importance of security.

Penetration Testing that addresses the security of the network layer is widely utilised and well understood in the Testing marketplace. Less well understood is the growing menace of hacking by using web applications. Why hack the difficult and well-defended application layers when you can join and get a password that gets you full access?

SQS offers both penetration and web based security testing to offer complete Brand Protection.

Brand Protection Web Application Testing

According to a recent Gartner report on security issues, 70% of all hacking attacks now occur at the application level. Recent interest and developments in security and hardening of the Network Layer have made it increasingly difficult for hackers to penetrate at this layer. Firewall Systems, SSL Encryption, IDS Systems, Strong Authentication and other implementations have made it so hard for hackers that other routes have become attack routes of choice.

Web-based applications have fundamentally changed the risks associated with traditional client-server applications as hackers can now see all the parameters used in server-side code - enabling them to bypass client-side validations.

This can result in hackers obtaining full control and access to information, modifying the content of the pages, hijacking transactions leading to privacy breaches and e-shoplifting - or even deleting or making the site totally unavailable.

SQS-Brand Protection can be booked with 24 hours notice on the subscription service or 72 hours as a one-off test. The service covers ALL the possible application based security problems. No capital expenditure is required and no purchase of software is needed. The automated approach of SQS-Brand Protection generates a large volume of test cases (as many as 100,000 for a complex application) and then applies them. Results are available immediately. The test cases are stored and form a considerable test asset. Re-test after further development is therefore very simple.

Deliverables

More information for Brand Protection web application testing can be found here.

Penetration Testing

Our partner Netcraft has been providing quality Internet security services since 1996 to leading financial institutions and e-Commerce sites worldwide. These services include vulnerability scanning (using Netcraft's own scanning tools and vulnerability database), penetration testing and application security reviews. Combined with SQS's services they provide first-class security testing offerings.

Netcraft's e-Commerce analysis is an in-depth penetration test performed by an expert. Its aim is to establish a security baseline

The SQS Network Examination also provides: