http://website.isecpartners.com/application_security_services_java_net_win32_etc en http://website.isecpartners.com/application_and_product_penetration_testing <ul> <li>Identification of security weaknesses through penetration testing with or without code review</li> <li>Demonstration of weaknesses as needed to validate findings</li> <li>Simplified architecture review and threat modeling</li> <li>Characterization of the impact of a successful attack</li> <li>Recommend solutions for addressing weaknesses</li> <li>The application, protocol, or implementation's security posture is reported</li> <li>Upon request, a public facing document explaining the test methodology and results can be provided</li> </ul> <br class="clear" /> Fri, 28 Jul 2006 20:26:00 -0700 sarva 32 at http://website.isecpartners.com http://website.isecpartners.com/application_design_review <ul> <li>Conduct a review of a system's design</li> <li>Identify security implications of the design</li> <li>Perform threat modeling</li> <li>Perform a gap analysis between the design and industry best practices</li> <li>Enumerate conflicts between business requirements and security considerations so informed trade offs are made</li> <li>Recommend solutions for addressing security weaknesses</li> <li>Can be conducted prior to implementation, or once in production</li> </ul> <br class="clear" /> Thu, 27 Jul 2006 22:15:19 -0700 sarva 44 at http://website.isecpartners.com http://website.isecpartners.com/application_code_review <ul> <li>Examine sensitive areas of software code</li> <li>Identify security flaws including: race conditions, overflows, character set conversion problems, logical errors, bad assumptions, key management flaws, and cryptographic mistakes</li> <li>Recommend specific fixes and general coding practice improvements appropriate to the Client's environment</li> <li>Lead groups of developer through code review exercises to enhance the Client's ability to audit code</li> <li>Upon request, a public facing document explaining the test methodology and results can be provided</li> </ul> <br class="clear" /> Fri, 28 Jul 2006 00:44:08 -0700 sarva 57 at http://website.isecpartners.com