How LA Manufacturers and Distributors Use Vulnerability Testing to Protect Company Assets (SlideShare)

How LA Manufacturers and Distributors

Use Vulnerability Testing

to Protect Company Assets

Courtesy of FPA Technology Services, Inc.

http://www.TechGuideforLADistributors.com

http://www.techguideforladistributors.com/

Sponsored by http://www.TechGuideforLADistributors.com

Craig PollackFounder & CEO

The right vulnerability testing,

security assessment, and

ongoing management

of your IT resources




can help bring your

stress level down and

ensure your company

will have many more

working days ahead




Vulnerability

Compared to Risk




Vulnerability can be defined

as a weakness or openness

to attack or damage




Testing is often done together

with a vulnerability assessment




This may sound similar

to a risk assessment,

but there are differences:




• Risk focuses on the

likelihood of a cause and

its impact (i.e. cost) on an

item or resource.




Risk can also be positive

or negative




• Vulnerability is focused on

the opportunity or specific

exposure points or resources

and its implication on other

resources.




Vulnerability is only negative




Following up on possible

chains of events is therefore

an important part of

vulnerability testing




What Should Be Tested

for Vulnerability?




Although every major

resource needed to keep

a manufacturer, distributor,

or wholesaler operational

should be checked,




IT resources get the lion’s

share of the testing




Sometimes companies

fall short and only think of

vulnerability of IT equipment

and its immediate impact

on operations




rather than the valuable

information it contains and

the overall value impacted




How Should the Testing

Be Done?




Tools exist to automate testing

to identify vulnerabilities

at a technical level




They should however be

supplemented with checks

on IT staff and employee

security procedures




Chains and Fuzzing




The following two aspects

of vulnerability testing

of IT resources are of

particular interest:




1. Identifying chains of effects




A user login for a print server

might not seem like a big

deal, but that print server

might also be connected

to a network




that also links to a database

with SQL injection vulnerability

and potential exposure of

administrator login credentials




2. Fuzzing




The idea is to stumble upon

unknown vulnerabilities by

using random input,




rather than continually

retesting the standard paths

through a system that have

already been shown to be

well-protected




Is your LA manufacturing

or distribution company

using vulnerability testing?




Give us your point of view

in the Comments box below


Copyright © FPA Technology Services, Inc.

Learn How to Boost Your Company’s

Productivity with the Right Technology

Download Your Free Guide

How COOs at Los Angeles Distributors

and Manufacturers Get More Done

Now at http://www.TechGuideforLADistributors.com
