End Point Protection

Mobile Application Review

A penetration test of mobile applications can help identify any misconfigurations or other vulnerabilities, offering assurance that they will not be used to compromise the confidentiality or integrity of a company.

Challenges

Mobile applications are defined as the software that runs on any mobile devices, such as smart phones, tablets, or similar devices. These applications are present and commonly used by companies to provide functionality to both clients and employees. Finding flaws in mobile applications can result in attackers compromising devices, sensitive customer or third-party information, to use the devices as gateways for accessing confidential internal corporate resources. It has become increasingly important to ensure applications are coded in an efficient manner, in order to mitigate potential vulnerabilities.

Service Capabilities

Code Inspection. This is a static analysis of the mobile applications themselves, decompiling them so that the source code can be examined.
Application Assessment. The application will be installed on a testing device to assess whether the application securely stores any sensitive data such as configurations, and also using debuggers and instrumentation frameworks to alter the intended functionality of the application in order to bypass protections.
Traffic Inspection. All traffic the application makes to any servers will be inspected and assessed to ensure that secure protocols are being used. In addition, the servers will be subject to infrastructure and web application assessments to provide assurance around their security posture.

Mobile Device Management Assessment.
When applicable, any MDM solution installed on the device will also be assessed, both the MDM configuration and the MDM application itself. Vulnerability and extended manual testing will explicitly identify where security holes lie and remove false positives. When applicable, other methods will be utilised.

Target

Why Exponential-e

Assess and test the application and all associated resources within the scope.
Any security issues identified will be highlighted, with recommendations made to ensure all risks are minimised.
Any high-risk issues, or ones that could be exploited, will be reported immediately as they could pose an imminent threat, were they to be discovered by an attacker.

Endpoint Protection Service

Exponential-e’s managed endpoint solution combines the latest technology, with a fully managed service, for complete peace of mind.

Challenges

With IT teams struggling for resources, tasks such as looking at logs and investigating alerts from endpoint and anti-virus solutions quickly fall down the ‘to-do’ list. Hackers do not use the same actions twice to steal data, moving laterally across the network attempting to take information and holding businesses to ransom. Ransomware/malware can spread and infect systems within minutes, crippling an organisation.

Service Capabilities

Based on a market-leading vendor with a service wrap that monitors and alerts organisations, backed by a team of specialists.
Our specialists monitor the endpoints for abnormal behaviour, manage software updates and alert the necessary teams at the customer's business.
Cloud based solution, with updates tested rigorously before being rolled out, which means that there is little need for IT teams to get involved.
We have a dedicated SOC team, monitoring, analysing and remediating threats.
Behaviour based detection of threats - Monitors
and analyses all behaviours on a machine, utilising full context analysis.
Autonomous lightweight agent - The agent acts independently and needs no outside intelligence
to make decisions.
Automated policy-based mitigation - When a threat is identified, the agent will automatically kill and quarantine the associated processes and tiles.
Threat remediation at machine speed - The agent is able to undo any malware driven changes on a machine.

Auto-immunisation of all endpoints - When a new threat is identified by the agent, all other agents are notified and can intervene instantly.
Real time, full context forensics - We leverage detailed forensic information in real-time to allow our SOC Team to make quick and informed decisions.
Dynamic exploit detection and prevention to spot attacks that enter via a weak component (i.e. browser, OS), with all low-level processes visible to the agent.
Rollback deleted or encrypted ﬁles to a pre-execution safe state without introducing any additional overheads.
Proactively block known threats - Leveraging blacklisting technology stops known threats before they are able to execute.
Admin deﬁned application control - This allows admins to have full control over what applications run on the protected Endpoints.
Threat behaviour and IOC (Indicators of Compromise) hunting - By leveraging Deep Visibility the SOC Team can search historical activity for IOC or visits to known phishing sites and alert users when necessary

Target

Why Exponential-e

Gain back hours managing endpoint security by allowing Exponential-e to take the problem away.
Protect endpoints and servers with a strong solution.
Virtual patching, which is a key challenge and the easiest route for hackers to gain access to machines and networks.