General Consulting - Overview

Digital Defense offers a variety of standard, well-defined services as described in our other Solution Brochures. From time to time, though, a client has special needs that fall outside our standard suite of core service offerings. We respond to these needs by providing customized consulting engagements suited to your requirements and, even more importantly, your budget. Three of the most frequently requested special engagements (War Dialing, Physical Security Site Review, and Wireless Audit) are offered as packaged service offerings. We specify others in a customized statement of work developed in conjunction with you to make sure we fill your needs at a price you can afford.

Solution Descriptions

War Dialing

A war dialing attack consists of a sweep of your communication system to identify the telephone lines that provide connectivity to the computer systems employed by your organization. We price this service by phone lines present. Our analyst will perform such an attack from our Secure Network Operations Center in San Antonio to determine points in your communications infrastructure that could be used to gain access to, and then compromise, your computer network. We then prepare a written report that provides an overview of the modems and systems we identify as being vulnerable to attack as potential "back doors" into your computer network.

Wireless Audit

This service, sold by analyst-day, aims to identify the added risks posed by the proliferation of wireless devices. A Digital Defense analyst will visit your site to determine the Wireless Application Points (WAPs) presently broadcasting, and then alert you to those detected. You will then be able to close down any .rogue. WAPs that may be present. The analyst will next evaluate WAPs that you .own. to determine whether they are protected by wireless encryption technology. The analyst will then sniff the traffic on each encryption-protected WAP and attempt to crack the encryption key used by the WAP. The analyst will also patrol outside your offices to determine the radius of the wireless broadcast and map this for you to show the dispersal area. We then prepare a detailed written report of all findings.

Physical Security Site Review

This is an abbreviated version of our Enterprise Risk Assessment service, and is performed at your site. The service focuses on identification of physical risks (penetration of facilities, security of tangible assets, risk of theft of hard copy information), and is sold by the analyst-day. Our analyst employs a combination of staff interviews, site evaluations, and after-hours office sweeps to identify areas of weakness in your physical access controls. We then provide a detailed written report of our findings, including valuable suggestions for mitigating identified risks.

Other Consulting Engagements

Depending on your specific needs, we are also capable of performing a host of other network security consulting functions, employing our own security analysts or recommending other firms or independent contractors. We perform code audits, firewall rule-set evaluations, liaison activities with regulators and law enforcement agencies, and a host of other custom engagements. Contact us with your specific requirements and we will formulate a plan to meet your needs.