Tiger Team Training
The traditional strategy for security assurance is usually called “penetrate and patch”. It is a matter of fact that software and networks systems contain vulnerabilities: when a penetration of the system has been detected, the exploited weakness start being researched, identified, and then patched or removed.
The continuous testing of the system security over the time is usually performed by specifically trained teams, dedicated to penetrating and analysing computer systems. They are generally called tiger teams. For organizations and systems that offer strong incentives for attack like financial applications or banks, even the prospective of a single, known, exploitable weakness should already be enough motivation to build or hire a dedicated team that continuously search for known and unknown weakness.
IITAC does not only offer highly qualified tiger teams for outsourcing the advanced security analysis of your software or your network through qualified audit services, but also offer you the needed training for creating -over the time- an highly qualified tiger team.
How do we differentiate from other “high-profile” tiger teams like i.e. the one that audited the initial release of Oracle© 10? None of our auditors would ever claim a web-aware audited software as ’safe’ if almost all its internal, runtime object are created with a null DACL and thus can be fully accessed by any user, leading to easy privilege escalation. Reason is, all our auditors and trained tiger teams must prove to be competent into Reverse Code Engineering and the Binary Audit methodologies. We differ because we offer quality.
Training a tiger team with Cognitive Core is costly, and require some time. Our tiger teams do not JUST learn to use ready-made tools to ensure security: they also learn to forge their tools, and the ability to perform extensive binary audit and vulnerability assessments.
We do not outline any ‘general’ course for training a Tiger Team: we listen to your specific needs and then outline a personalized training trail for transforming your selected, trustworthy candidates into the high-profile, IT Security specialists you need.