SecurityLabs

This case study examines an engagement with a North American Tier-1 carrier that commissioned Spirent SecurityLabs to conduct penetration testing and a Host Security Review of their session border controller. Spirent’s penetration tests conform with the recommendations in NIST 800-115 section 5. The process consists of multiple phases – planning, reconnaissance, scanning, exploitation, post-exploitation, and reporting. Spirent’s team of experts identified numerous critical and high-severity issues in the deployed version of the SBC that posed a significant risk to the asset, its network, and other assets in conjunction with the business unit and organization, or its customers.

在技术行业中，面对网络、设备和应用遭受的各类攻击，相关的预防、探测和修复已经成为各方关切的重点，同时也带来了巨大的挑战。但随着消费电子产品、基于网络和云的服务，以及联网设备的新世界不断汇聚，个人车辆已经成为新的众矢之的。在汽车行业中，整车制造商、软件开发商、芯片制造商，以及汽车供应链中的其它零组件制造商，都愈发深刻地认识到，无论是零组件，还是成品都可能成为恶意攻击的潜在目标。