Top Banner
Uniqs Security Assessment uniqs.com.ar [email protected] Sturiza 503 – Olivos Buenos Aires, Argentina
12

Security Assessment Uniqs

Jun 30, 2015

Download

Documents

Pablo Calvo

Caso de exito. Security Assessment
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Security Assessment   Uniqs

UniqsSecurity Assessment

[email protected] 503 – Olivos

Buenos Aires, Argentina

Page 2: Security Assessment   Uniqs

Monitoreo

Page 3: Security Assessment   Uniqs
Page 4: Security Assessment   Uniqs
Page 5: Security Assessment   Uniqs

Resumen:

DMZ Empresa #1Con Acceso 11Sin Acceso 0Unix 6Linux 5Hallazgos En todosCorrecciones enviadas a administradores 294Correcciones aplicadas por admins 7Correcciones Pendientes 287

Page 6: Security Assessment   Uniqs

Equipo OSBaseline SI

UsersAudit Logs

PortsNetwork Scan

Misc Rootkit Parches Controles

1 Red Hat 5.x 3 5 5 10 5

2Red Hat 4.8 6 5 5 5 5 5 10 5

3Red Hat 4.8 10 5 5 5 5 5 10 5

4 Red Hat 5.x 9 5 5 5 5 5 10 5

5 Solaris 9 26 10 5 5 10 5 10 5

6 Red Hat 60 5 5 5 10 5 10 5

7 HP-UX 11.11 32 5 5 5 5 5 10 5

8 HP-UX 11.23 35 5 5 5 10 5 10 5

9 HP-UX 11.23 35 5 5 5 5 5 10 5

10 HP-UX 11.11 42 5 5 5 10 5 10 5

11 HP-UX 11.23 29 5 5 5 10 5 10 5

  Hallazgos de alto impacto, requieren acción (Métrica=cantidad de hallazgos con valor Alto en análisis)

  Hallazgos requieren atención y/o acción (Métrica: Peso de 5 si hay hallazgos, peso de 10 hallazgos de cuidado)

  No se registran hallazgos significativos (Metrica: Peso de 0 si no hay hallazgos)

Heat Map

Page 7: Security Assessment   Uniqs

Accesib

les

Con Access

Control a

ctivo

Sin Acce

ss Contro

l acti

vo0

50100150200250300350400

Series1

Con Oracle Con Hedge Hog Sin Hedge Hog0

20

40

60

80

100

120

140

160

Series1

HP-UXSolarisLinuxAIXSCOOSF

Web Servers ApacheCon Mod_Security

Page 8: Security Assessment   Uniqs
Page 9: Security Assessment   Uniqs
Page 10: Security Assessment   Uniqs
Page 11: Security Assessment   Uniqs

Preguntas?

Page 12: Security Assessment   Uniqs

Gracias!