ValCom's Security AutoScan automates the detection, substantiation and remediation of risk for each of the attack phases below, allowing you to proactively activate the most comprehensive assessment of your security posture. Additionally with our compliance plug-in you can also assess and achieve policy compliance for regulations such as PCI DSS. Contact us at 630.285.0500 or send us an email.
The anatomy of an attack can be summarized in seven phases:
I. Discovery. This phase includes target scanning and footprinting.
II. Enumeration. This phase includes passive and intrusive scanning to
determine vulnerabilities.
III. Penetration. This phase includes attempts to gain access. If penetration
is unsuccessful, the target is usually disabled with a Denial of Service.
IV. Becoming Root. This phase includes steps to escalate account privileges.
V. Data Theft. This phase includes information pilfering including passwords
and databases.
VI. Log Bashing. This phase includes covering any traces of intrusion.
VII. Planting Backdoor. This phase includes planting a means of stealth remote
control and/or access.