A Security Assessment is the measurement of a company’s security posture and aims to reveal any possible flaws in the systems, in order to define the correct countermeasures.

Security Assessments rely on:
   • Vulnerability Assessment, which is mainly conducted automatically with the objective to find out all the vulnerabilities in the systems
   • Penetration Testing, a process whereby someone manually proves that the vulnerabilities actually exist in those systems and are exploitable

Approach & Methodology

NBSecurity favours a hybrid manner approach: not only automated scans but more than anything manual verification and testing.
We believe, in fact, that human intelligence is unlikely replaced and is still the source of high quality results.
Our qualified ethical hackers and experts will actively test the effectiveness of your cyber defences through internal and/or external attempts to find, track and prioritize your actual vulnerabilities.

In carrying out the activities, NBSecurity incorporates guidance from the following methodologies:

"An independent, focused threat-based effort by an interdisciplinary, simulated adversary to expose and exploit vulnerabilities to improve IS security posture."
(DoDD 8570.1)
The term originated during the Cold War, within the military environment, to describe a team whose purpose is to penetrate security of “friendly” installations, and thus test their security measures.
Within the Information Security Industry, the term is used to indicate an external and specialized team (Red Team) whose core function is to simulate a fully motivated and funded adversarial attack against the specific company. This provides the company’s defending department (Blue Team) the ability to test its capability of Incident Response in real time and it gives a comprehensive assessment of the company’s security program.

Approach & Methodology

NBSecurity works with the customer security team to define threat scenarios that will test effectiveness of company technology, policies and people and subsequently it combines a number of test strategies and techniques in order to gain access to pre-defined information assets.
NBSecurity organizes the activities in four actions, called rounds:
   • information gathering
   • privilege escalation
   • lateral movement
   • target acquisition

For each of the above-mentioned round, a score will be given to both the Red Team and Blue Team according to their ability in attacking and defending respectively.

Our Red Team Testing provides three different approaches based on the amount of information the tester knows about the targets, what the target knows about the tester or expects from the test, and the legitimacy of the test.

Advanced Persistent Threats (APT) represent the simulation of real-world advanced threats with the purpose to assess an organization's intrusion prevention, detection, and response capabilities.

Approach & Methodology

In preparation for the initial compromise, NBSecurity gathers information about the target organization's employees, through publically available tools: the human element is in fact one of the weakest links in security. For this reason, social engineering is often used to break into the organization, in the form of a spear phishing attack. Other popular infection methods include web application attacks, zero-day exploits, custom malware designed to evade signature-based detection, and other proprietary hacking tools.
The object is to establish a foothold in the target environment, and this can be reached through well-crafted, effective phishing emails that contain malicious attachment or embedded link. Once opened, the infected email initiates a call home across the Internet to systems controlled by NBSecurity, and deliver access to the target's internal network.
At this point the attacker can move laterally across client infrastructure and acquire administrator privileges over victim's computer until control is gained on other workstations, servers and infrastructure elements, and proprietary data are finally stolen.

We want to make sure your organization is prepared to defend against the most advanced existing threats. That’s why we are here to help you design the security architecture and find the most effective security solution for your enterprise.
Our goal is to reinforce your network evaluating together an integrated security strategy that uses multiple technologies applied across different possible points of attack.
Among the most current and innovative technologies available that we recommend, let’s mention next generation firewalls, sandboxing, and network access controls.
The approach used by NBSecurity is multi-vendor, in order to enable you to choose from a wider range of options and make sure to deploy the best solution for your company needs.

Adapt your security architecture by bringing together innovative security capabilities to prevent, detect and respond to advanced threats: our skilled and certified IT security experts are here for you!

Once the role of security team was to minimize the potential attack surface, protecting network perimeter and securing the endpoint. Today hardening walls is not sufficient anymore.

As recruiters, salespeople, and advertisers increasingly turn to social media for their ease of use, low cost, scale and accessibility, also cybercriminals find them appealing.
Social networks have in fact broaden companies’ borders, boosting connectivity, mobility and engagement across organizations, departments and people.
But, if on one side they facilitate positively companies’ presence and visibility, on the other they become a massive new attack vector, which exposes organizations to additional business risks, such as account hijacking, corporate impersonations, customer fraud, etc.

It’s here that security team comes into play: on one hand it must facilitate the digital expansion and collaboration, as something inevitable for conducting business in the modern world, on the other it’s responsible for ensuring it is done safely and securely.

For this reason, NBSecurity has engaged with two market leaders in the field of Social Media Security and Cyber Situational Awareness, giving its customers the possibility to discover how exposed are they and what is their digital footprint. By continuously monitoring across social media, dark social media and even dark web, security risks and business threats targeting the brand, the company’s employees and the customers come to light. Eventually scammers and fraudulent actors can be taken down.

Are you ready to discover how #sociallysecure are you?

In today’s cyber world, every organization should have good security incident detection and response capability, in order to defend against latest advanced threats. However, many companies lack a fully functional Security Operations Center (SOC), which is the heart of a good Security Incident Management process, mainly because of a shortage of trained security professionals, cost constraints, appropriate security tools and/or prudent incident management process. NBSecurity can provide skilled resources either you want to outsource this function to a Managed Security Services Provider (MSSP) or you decide to build your own integrated SOC. Our resources, in fact, in addition to security device monitoring and alerting, have extended capabilities for advanced threat detection and real-time incident response, containment and remediation. Moreover, we cover the entire lifecycle of a security incident--from initial detection through returning a network back to steady state operation. So, entrust NBSecurity to optimize your security resources and maximize your security investment: our experts will work closely to your security team in order to reduce your security risk, enhance your detection capabilities and protect your most valuable assets.