Ironwood Cyber has unparalleled expertise and extensive experience in the realm of cybersecurity, penetration testing, and automated assessments. They have developed an intelligent engine for automated cyber assessment tools called Enlight™ to aid in penetration tests and proactive discovery of threats on enterprise networks. Developed by penetration testers to automate and streamline assessments, Ironwood Cyber is composed of a team of experienced hackers across various domains that can modify and tailor Enlight™ to any specific customer's needs.
Enlight™ conducts asset discovery, asset fingerprinting, cybersecurity vulnerability discovery, and unobtrusive penetration testing of operational/informational technology assets deployed in enterprise environments. The product composes of an agent that communicates with the Enlight™ Decision Engine. The Decision Engine takes as inputs, system and network information obtained via discovery to make informed decisions on optimal subsequent assessment and testing actions to provide the level of coverage of a skilled security assessor. It provides these services in a continuous and on-demand fashion, along with detailed reporting and mitigation guidance to assist customers in ensuring a secure environment. Assessments can be run on a client’s internal and external network to get a full scope of the attack surface.
The Enlight™ intelligent Decision Engine, emulates the activities of a skilled security assessor by continuously expanding its metadata knowledge about each system (and the environment as a whole) through automation, incorporating into future assessments key attributes such as: ports/protocols, vulnerabilities, and artifacts obtained via previously executed discovery and exploitation Reactions, which are designed to be interrelated and hierarchical in structure. Exploitation Reactions are automated by the findings they discover and can compose of the execution of multiple well-known penetration techniques and tools like Metasploit, etc. to confirm vulnerabilities. As more vulnerabilities and attributes are discovered, Enlight™ generates a more robust view of the current enterprise’s cybersecurity state. The product created expands well beyond a basic vulnerability scan tool and performs a cyber assessment that will give a customer a confident view of the larger attack surface and threats that they face, emulating advanced attacks and techniques developed from real-world assessments, reliable intelligence and expert experience.
Ironwood Cyber Enlight™ has the following features to ensure it meets the customer’s needs:
• Asset discovery
• Asset identification
• Network ports/services discovery
• Vulnerability identification
• Management interface
• Reporting
• Automated operation
• Extensibility
This is currently provided as either a cloud-based Software-As-A-Service (SaaS) solution or a stand-alone appliance-based solution and can be accessed through the Ironwood Cyber customer portal either locally or in the cloud depending on the deployment. The assessment can be viewed through a simple and intuitive user interface as shown in Figure 2. In use
cases where the internet is not accessible, Enlight™ can also be consolidated into a self-contained mobile system which can be utilized in stand-alone or closed/classified environments, such as the one we are developing for the Transportation Security Administration.
Негізгі бет 240508 Ironwood Cyber - On-Demand Cyber Assessment
No video
Пікірлер