SecurityLabs

This case study examines an engagement with a North American Tier-1 carrier that commissioned Spirent SecurityLabs to conduct penetration testing and a Host Security Review of their session border controller. Spirent’s penetration tests conform with the recommendations in NIST 800-115 section 5. The process consists of multiple phases – planning, reconnaissance, scanning, exploitation, post-exploitation, and reporting. Spirent’s team of experts identified numerous critical and high-severity issues in the deployed version of the SBC that posed a significant risk to the asset, its network, and other assets in conjunction with the business unit and organization, or its customers.

Preventing, detecting, and remediating attacks on networks, devices, and applications have been important concerns and challenges for the technology industry. But as consumer electronics, network- and cloud-based services, and the new world of connected devices converge, the personal vehicle has become a target. The auto industry—automakers, software developers, chipmakers, and other component manufacturers in the automotive supply chain—is becoming increasingly aware that both components and finished products are potential targets for malicious attacks.