Assessment Methodology

Discovery

The discovery phase consists of extensive information gathering that results in a detailed blueprint of your network and its security profile. This includes all active IP network ranges, domain names and their associated TCP, UDP, information about hosts, such as OS and applications, as well as other network services accessible from the internal network.

Device Profiling

The information from the discovery phase allows you to then profile the devices on your network and dynamically identify them and classify them by type. This allows for the provisioning of security policies for each type of device as it connects to your network and appropriately assign functional responsibility for each one.

Vulnerability Scanning

By using the information gathered in the earlier phases, Infinity will perform the task of an in-depth test to penetrate vulnerable areas and systems to develop strategic recommendations.

The analysis will include categories such as:

  • System Compromise
  • Unauthourized data access
  • Information disclosure
  • Command execution
  • Denial of service

Validation

Infinity partners with your business to optimize your security goals.

In the final phase of our assessment, our consultants will list all vulnerabilities and rank them by risk; low, medium and high and then for a nominal fee, attempt to exploit or validate this data and compare with the initial findings of the assessment.