More Related Content Similar to Pen test pavol.luptak (20) Pen test pavol.luptak4. &217(176
FRQVHUYDWLYH EXVLQHVVHV D QHZ WUHQG LV GHYHORSSLQJ 3(17(67,1* ,1 $6,$
E ZKLFK RUJDQL]DWLRQV FUHDWH WKH RZQ LQWHUQDO WHDP RI 3HQHWUDWLRQ 7HVWLQJ LQ ,QGRQHVLD
SHQWHVWHUV 7KLV DUWLFOH FRYHUV VRPH RI WKH PRWLYDWLRQ IRU
$ DVH 6WXG
VXFK RUJDQL]DWLRQV WR JR WKLV URXWH DV ZHOO DV VRPH RI E 6HPL XOLDQWR
WKH FKDOOHQJHV DORQJ WKH ZD 7KH ,QGRQHVLDQ HQWUDO %DQN %DQN ,QGRQHVLD KDG
UHOHDVHG WKH QDWLRQDO UHJXODWLRQ ZKLFK LQFOXGHV SROLF
DQG SURFHGXUHV UHJDUGLQJ WKH SURWHFWLRQ RI LQIRUPDWLRQ
21)(5(1(6¶ 63($.(5 DVVHWV EDVHG RQ 5LVNV 7KLV UHJXODWLRQ KDV EHHQ
,QWHUYLHZ ZLWK (UGDO 2]NDD WULJJHULQJ WKH ,QIRUPDWLRQ 6HFXULW $ZDUHQHVV LQ
5. E 3HQ7HVW 7HDP ,QGRQHVLD¶V EDQNLQJ LQGXVWU ,W LV VWDWHG WKDW EDQNV DQG
(UGDO 2]NDD LV WKH IRXQGHU DQG 6HQLRU 0LFURVRIW RWKHU ILQDQFLDO LQVWLWXWLRQV KDYH WR FRQGXFW YXOQHUDELOLW
,QVWUXFWRU RI (2 ,7 7UDLQLQJ ZKLFK KDV QRZ PHUJHG ZLWK DVVHVVPHQW DQG SHQHWUDWLRQ WHVWLQJ DW PLQLPXP RQFH
)DVW /DQH $VLD 3DFLILF RQH RI $XVWUDOLD¶V 6LOYHU FHUWLILHG HYHU WKUHH HDUV LQ RUGHU WR SURWHFW DQG PDLQWDLQ WKHLU
0LFURVRIW /HDUQLQJ 3DUWQHUV FULWLFDO LQIRUPDWLRQ DVVHWV IURP FXUUHQW DQG IXWXUH
(UGDO WUDYHOV DFURVV $XVWUDOLD WHDFKLQJ ,7 ZRUNVKRSV WKUHDWV
DQG KDV VHUYHG DV 3URMHFW 0DQDJHU (QJLQHHU IRU VHYHUDO
ODUJH RUJDQLVDWLRQV LQ $XVWUDOLD KLQD 3KLOLSSLQHV DQG ,QWHUYLHZ ZLWK +DULVK 7KDNUDO
WKH 86$ 6. E 3HQ7HVW 7HDP
+DULVK 7KDNUDO LV WKH 'LUHFWRU RI ,QIRUPDWLRQ 6HFXULW IRU
,QWHUYLHZ ZLWK 3HWHU :RRG 7HFK%KDUDW RQVXOWLQJ ZLWK HDUV RI H[SHULHQFH DQG
E 3HQ7HVW 7HDP DFKLHYHPHQW DFURVV WKH ZKROH VSHFWUXP RI PDQDJHPHQW
3HWHU :RRG LV D ZRUOG UHQRZQHG VHFXULW HYDQJHOLVW DVSHFWV RI ,QIRUPDWLRQ 6HFXULW $SDUW IURP FRQGXFWLQJ
VSHDNLQJ DW FRQIHUHQFHV DQG VHPLQDUV RQ HWKLFDO KDFNLQJ WUDLQLQJ KLV H[SHUWLVH LQFOXGHV GHVLJQ LPSOHPHQWDWLRQ
DQG VRFLDO HQJLQHHULQJ +H KDV DSSHDUHG LQ GRFXPHQWDULHV PDQDJHPHQW QHWZRUNV FRQVLVWLQJ RI :LQGRZV /LQX[
IRU %% WHOHYLVLRQ SURYLGHG FRPPHQWDU RQ VHFXULW HWF XUUHQWO KH FRQGXFWV WUDLQLQJ IRU ( RXQFLO
LVVXHV IRU 79 DQG UDGLR DQG ZULWWHQ PDQ DUWLFOHV RQ D DQG RWKHU WUDLQLQJV +LV UROH DOVR LQFOXGHV ZRUNLQJ
YDULHW RI VHFXULW WRSLFV +H KDV DOVR EHHQ UDWHG WKH ZLWK WKH WHFKQLFDO WHDP IRU 9XOQHUDELOLW $VVHVVPHQW
%ULWLVK RPSXWHU 6RFLHW¶V QXPEHU RQH VSHDNHU 3HQHWUDWLRQ 7HVWLQJ
,19(670(17 ,1 ,7 6(85,7 3(17(67,1* %86,1(66
$ %XVLQHVV 1HHG 7R 6XFFHVV ,QWHUYLHZ ZLWK -HURPLH -DFNVRQ
E 0DQXHO DVWUR E 3HQ7HVW 7HDP
3HQHWUDWLRQ 7HVWLQJ LV D ZLGH WHUP DQG DOVR KDV GLIIHUHQW 0U -HURLH -DFNVRQ LV D VHDVRQHG VHFXULW H[SHUW ZLWK RYHU
SRLQWV RI YLHZV DFFRUGLQJ WR VHFXULW H[SHUW¶V VWDWHPHQWV HDUV RI H[SHULHQFH OHDGLQJ VHFXULW FRQVXOWDQFLHV
WKH PRVW FRQVHUYDWRUV DJUHH WKDW LV HVVHQWLDO WR SHUIRUP SURYLGLQJ LQIRUPDWLRQ VHFXULW VHUYLFHV IRU )RUWXQH
LW FRQWLQXRXVO DQG LI RX IDLO RQ WKLV GXW RX PD VLW ODUJH HQWHUSULVH DQG PLG VL]HG EXVLQHVVHV $ ZHOO NQRZQ
DQG ZDLW WKH SXQLVKPHQWV RI KHOO RWKHUV MXVW WKLQN LV D VSHDNHU 3UHVLGHQW RI WKH 6DQ 'LHJR 2:$63 KDSWHU
ZDVWH RI WLPH 8QGHU P FRQFHUQ SHQHWUDWLRQ WHVWLQJ LV D 6$16 0HQWRU DQG SUHYLRXV 9LFH 3UHVLGHQW RI WKH 6DQ
ORW PRUH FRPSOH[ WKDQ VWDWH DQ RSLQLRQ 'LHJR ,6$$ KDSWHU 0U -DFNVRQ LV ZHOO QHWZRUNHG
3HQHWUDWLRQ 7HVWLQJ ± RQWLQXRXV
3(17(67,1* ,1 (8523( GHPDQG RXWZHLJKV VXSSO
,QWHUYLHZ ZLWK 3DYRO /XSWiN E +DULVK 3DUPDU
E 3HQ7HVW 7HDP 3HQHWUDWLRQ 7HVWLQJ KDV EHHQ DQ DUHD ZKHUH GHPDQG KDV
3DYRO /XSWiN JDLQHG KLV %6F DW WKH )(, 678 LQ %UDWLVODYD RXWZHLJKHG VXSSO LQ UHFHQW HDUV DQG WKLV LV JUDGXDOO
DQG 06F LQ RPSXWHU 6FLHQFH DW WKH ]HFK 7HFKQLFDO LQFUHDVLQJ 7KLV LV D UHVXOW RI H[LVWLQJ 3HQHWUDWLRQ
8QLYHUVLW ZLWK PDVWHU WKHVLV IRFXVHG RQ XOWUD VHFXUH 7HVWLQJ FRQVXOWLQJ EXVLQHVVHV DJJUHVVLYHO KLULQJ DQG
VVWHPV +H KROGV PDQ SUHVWLJLRXV VHFXULW FHUWLILFDWLRQV D UHDO VXUJH LQ RWKHU FRPSDQLHV HQWHULQJ WKLV PDUNHW
LQFOXGLQJ ,663 DQG (+ KH LV 6ORYDN 2:$63 FKDSWHU DQG UHTXLULQJ H[SHULHQFHG 3HQHWUDWLRQ 7HVWHUV WR KHOS
OHDGHU FR IRXQGHU RI 3URJUHVVEDU DQG 62,7 RUJDQL]DWLRQV HVWDEOLVK WKHPVHOYHV LQ WKLV YHU DFWLYH VSDFH
ZKHUH KH LV UHVSRQVLEOH IRU ,7 VHFXULW
*0. IUUQQFOUFTUNBHDPN
10. FRPSDQLHV DQG RUJDQL]DWLRQV VLPSO GLG QRW FDUH DERXW
WKH QRWLRQ RI ,7 VHFXULW :LWK WKH FRPSXWHUL]DWLRQ RI WKH
VRFLHW DQG SURSDJDWLRQ RI WHFKQRORJLHV LQ HYHUGD
EXVLQHVV LQGLYLGXDO OLIH WKH ,7 VHFXULW EXVLQHVV
EHFRPHV PXFK PRUH LPSRUWDQW DQG YDOXHG
8IBUJOTQJSFEZPVUPTUBSU/FUIFNCB $BO
ZPVUFMMVTNPSFBCPVUZPVSDPNQBOZ
3/ )UHHGRP DQG LQGHSHQGHQFH ZHUH GHILQLWHO
UHDVRQV WR VWDUW P RZQ FRPSDQ , ZDV VLPSO WLUHG RI
ZRUNLQJ IRU FRUSRUDWLRQV ZLWK FRPSOLFDWHG EXUHDXFUDWLF
SURFHVVHV DQG RYHUKHDG $QG EHFDXVH , ZDQWHG WR VWD
LQ WKH ,7 VHFXULW ILHOG , GHFLGHG WR FUHDWH P RZQ ,7
VHFXULW FRPSDQ
0DEH WKLV LV QRW IRU HYHURQH EXW , WKLQN IUHHGRP
DQG LQGHSHQGHQFH LV DQ LQHYLWDEOH FRPSRQHQW RI
KDSSLQHVV IRU SHRSOH WRGD VR , VXJJHVW RX OHDYH
RXU IXOOWLPH MRE DQG VWDUW WR ZRUN IRU FRQWUDFW RU
FUHDWH RXU RZQ FRPSDQ DQG FKDQFHV DUH RX ZLOO
EH KDSS VRRQ
1HWKHPED LV D 6ORYDN ,7 VHFXULW FRPSDQ IRXQGHG
LQ SULPDULO IRFXVHG RQ WKH ZHE DSSOLFDWLRQ
VHFXULW DQG SHQHWUDWLRQ WHVWV ZLWK MXVW ILYH VHFXULW
JHHNV DW WKH PRPHQW 2XU EURDG SRUWIROLR WULHV WR FRYHU
DOO DVSHFWV RI WHFKQLFDO VHFXULW LQFOXGLQJ LQWUDQHW DQG
ORFDO VVWHP VHFXULW DXGLWV IRUHQVLF GLJLWDO DQDOVLV
ZLUHOHVV QHWZRUNV DXGLWV VHFXUH 9R,3 VROXWLRQV DQG
KDUGHQLQJ VVWHPV
%PZPVPQFSBUFPOMZPOUIF4MPWBLNBSLFU
8IBUJTUIFQPMJDZPGZPVSDPNQBOZ
3/ $W WKLV PRPHQW ZH RSHUDWH RQ ERWK 6ORYDN
DQG ]HFK PDUNHW :H DOVR KDYH VRPH
FXVWRPHUV LQ WKH 86
5HJDUGLQJ RXU SROLF ,7 VHFXULW LV RXU SDVVLRQ ,W
LV QRW MXVW D ZRUN IRU XV VR ZH DUH YHU HQWKXVLDVWLF
DQG WU WR JR LQWR WKH GHSWK ,7 VHFXULW LV DOZDV
DERXW WUXVW DQG ZH DUH DZDUH RI WKLV IDFW :H VWULFWO
IROORZ WKH FRGH RI HWKLFV DQG ZRUN WR PDLQWDLQ D JRRG
UHODWLRQVKLS ZLWK DOO RI RXU FXVWRPHUV 3HQ WHVWLQJ DQG
,7 VHFXULW DXGLWLQJ LV RXU FRUH EXVLQHVV VR ZH ZDQW
WR RIIHU WKHVH VHUYLFHV WR RXU FXVWRPHUV QRW DV D RQH
WLPH RIIHULQJ EXW DV SDUW RI D UHJXODUL]HG SURFHVV
)PXEPZPVTFF*5NBSLFUJOUIJTQBSUPG
VSPQF 4MPWBLJB
$[FDI
1PMBOE
FUD
3/ 7KH ,7 VHFXULW PDUNHW MXVW UHIOHFWV WKH GHYHORSPHQW
RI ,7 LQGXVWU LQ HYHU FRXQWU VR LW LV ELJ LQ WKH 8. DQG
PDEH 3RODQG DQG VPDOO LQ 6ORYDNLD
, VHH VLJQLILFDQW EXVLQHVV LVRODWLRQ EHWZHHQ $XVWULD
DQG 6ORYDNLD ,I WKH $XVWULDQ FRPSDQ LV ORRNLQJ IRU D
SHQHWUDWLRQ WHVWLQJ FRPSDQ LW WULHV WR ILQG LW LQ $XVWULD
,I LW IDLOV LW WULHV WKH *HUPDQ PDUNHW ,I LW VWLOO IDLOV LW WULHV
11. 3(17(67,1* ,1 (8523(
WKH 6ZLVV PDUNHW DQG WKHQ PDEH D 86 RU 8. EDVHG )PXEPZPVSFDSVJUQFOUFTUFST 8IBUEPZPV
FRPSDQ EXW QRW D 6ORYDN RQH $QG HV WKH GLVWDQFH MPPLGPSJOQPUFOUJBMQFOUFTUFST
EHWZHHQ %UDWLVODYD DQG 9LHQQD LV RQO NP 3/ $OO RXU SHQ WHVWHUV DUH ORQJWLPH IULHQGV ZKR WUXVW
2Q WKH RWKHU KDQG WKH UHODWLRQVKLS EHWZHHQ ]HFK HDFK RWKHU ,Q WKH SDVW ZH WULHG WR UHFUXLW UDQGRP
DQG 6ORYDN ,7 VHFXULW FRPSDQLHV LV SHUIHFW 7KLV LV SHRSOH EXW LW GLG QRW ZRUN ,Q WKH FDVH RI KLULQJ QHZ
PD EH DOVR D UHDVRQ ZK ZH KDYH PRUH FXVWRPHUV LQ HPSORHHV ZH ZRXOG FKRRVH IURP RXU H[LVWLQJ IULHQGV
]HFK 5HSXEOLF WKDQ LQ 6ORYDNLD QRZ RU VRPH SHRSOH ZKR DUH DOUHDG ZHOO NQRZQ LQ WKH ,7
VHFXULW FRPPXQLW 7KLV LV LQWHUHVWLQJ LQ RXU FRPSDQ ±
:PVTQFDJBMJ[FJOQFOFUSBUJPOUFTUJOH8IBU EHFDXVH RI RXU ORYH RI IUHHGRP DQG LQGHSHQGHQFH RXU
NBLFTZPVSDPNQBOZVOJRVFPOUIFNBSLFU FRPSDQ LV FRPSOHWHO GLVWULEXWHG DQG GHFHQWUDOL]HG
3/ $W OHDVW LQ ]HFK 6ORYDN PDUNHW ZH DUH XQLTXH LQ ± DOPRVW HYHU HPSORHH OLYHV LQ D GLIIHUHQW FLW
SURYLGLQJ FRYHULQJ WKH ZKROH 6ORYDN ]HFK PDUNHW ,Q RUGHU WR
HQVXUH WKH PD[LPXP VHFXULW ZH UXQ RXU GHGLFDWHG
‡ 6PDUW FDUG 5),' VHFXULW DXGLWV FRPSDQ VHUYHUV ZLWK IXOO GLVN HQFUSWLRQ LQ D VHFXUHG
‡ 6$3 SHQHWUDWLRQ WHVWLQJ VHUYHU KRXVLQJ ZH XVH D 9R,3 EDVHG FDOO FHQWHU ZLWK
‡ $FWLYH VHFXULW UHVHDUFK GHPRQVWUDWHG E RXU IXOO HQFUSWHG FDOOV DQG ZH XVH 3*3 IRU RXU LQWHUQDO
UHJXODU SUHVHQWDWLRQ DW ZRUOGZLGH FRQIHUHQFHV FRPPXQLFDWLRQ
‡ 6SRQVRUHG VHFXULW UHVHDUFK HV ZH ILQDQFLDOO
VXSSRUW RXU UHVHDUFK DQG GHYHORSPHQW RI PDQ :PVBSF$*441BOE$)8IBUBSFUIFCFOFGJUT
RSHQ VRXUFH VHFXULW FUDFNLQJ WRROV PGIBWJOHUIFTFDFSUJGJDBUJPOTBOEXIBU
PUIFSDPVSTFTXPVMEZPVSFDPNNFOEUPQFO
)PXXPVMEZPVBEWJTFDPNQBOJFTUIBUBSF UFTUFST
MPPLJOHGPSHPPEQFOUFTUJOHTFSWJDFT 3/ 7R EH KRQHVW ZH KDYH RXU ,7 VHFXULW FHUWLILFDWLRQV
3/ $VN IRU SULPDULO IRU EXVLQHVV UHDVRQV EHFDXVH PDQ RI
RXU FXVWRPHUV UHTXLUH WKHP $QG LW ZRUNV ,W KHOSV
‡ (WKLFDO UHTXLUHPHQWV XV ZLQ PDQ WHQGHUV DQG VRPHWLPHV LW FDQ EH D UHDO
‡ GR QRW EH H[WRUWHG E SHQWHVWLQJ FRPSDQLHV FRPSHWLWLYH DGYDQWDJH
WKDW FODLP WR UHYHDO ÄFULWLFDO YXOQHUDELOLWLHV´ LQ ,I RX DUH ORRNLQJ IRU VRPH SHQ WHVWLQJ FHUWLILFDWHV
RXU LQIRUPDWLRQ VVWHP DQG WKHQ IRUFH RX WR FKHFN IRU *3(1 :$37 (37 (+ (6$ /37
RUGHU DQG SD IRU WKHLU SHQHWUDWLRQ WHVW ,W LV MXVW
EODFNPDLO 8IBUBSFZPVSQSPGFTTJPOBMQMBOTGPSUIF
‡ GRHV WKLV SHQWHVWLQJ FRPSDQ IROORZ D GVUVSF
UHVSRQVLEOH VHFXULW GLVFORVXUH 3/ , ZRXOG OLNH WR IRFXV PRUH RQ GDWD PLQLQJ QRW MXVW
‡ PXWXDO 1'$ DQG FRPSUHKHQVLYH VHFXULW IURP WKH VHFXULW SRLQW RI YLHZ ± , VHH LW DV D YHU JRRG
DVVHVVPHQW FRQWUDFW VKRXOG EH D PDWWHU RI SURVSHFWLYH DUHD $OVR WR FRYHU PRUH FRXQWULHV DW OHDVW
FRXUVH LQ HQWUDO (XURSH
‡ 5HSXWDEOH UHIHUHQFHV ± ZKLFK RX DUH DEOH WR YHULI
‡ 3HQ WHVW UHODWHG FHUWLILFDWHV *3(1 :$37
(37 (+ (6$ /37 ± GR QRW DVN IRU ,663
RU ,6$ WKHVH FHUWLILFDWHV DUH XVXDOO DEVROXWHO
XVHOHVV IRU SHQWHVWLQJ
‡ 6DPSOH ILQDO UHSRUWV ± FKHFN IRU FXVWRP PDGH
H[SORLWV DQG WKH H[SORLW RI QRQ WULYLDO YXOQHUDELOLWLHV
‡ 0DQXDO LQVSHFWLRQ ± WKLV LV SUREDEO WKH EHVW ZD WR
YHULI WKHLU GHHS NQRZOHGJH RI SHQ WHVWLQJ ± GRHV
WKLV FRPSDQ GR PDQXDO LQVSHFWLRQ RU WKH MXVW UXQ
DXWRPDWHG SRUW ZHEDSSVHF VFDQQHUV
‡ RQWULEXWLRQ WR WKH ,7 VHFXULW FRPPXQLW ± LW
LV D JRRG LGHD WR SUHIHU WKH SHQWHVW FRPSDQLHV
ZKRVH HPSORHHV DUH ZHOO NQRZQ LQ WKH ,7
VHFXULW FRPPXQLW DQG DVN IRU WKHVH SHRSOH LI LW LV
SRVVLEOH
1BHF IUUQQFOUFTUNBHDPN