Case Studies

  Challenge:

Within the scope of functions development, the client had a regulatory requirement for the adoption and implementation of an information security management system (SGSI ISO 27001), with its certification by an accredited entity.

The Client did not have sufficient knowledge or resources to carry out the implementation.

  Solution:

Devoteam Cyber Trust provided a service composed by a project, with the intervention of its consulting team that carried out the process of implementation and support in the certification obtained by the client.

During this project, which lasted 9 months, Devoteam Cyber Trust applied its 5-step roadmap proven in numerous projects, through which supports the client in all activities, namely in the structuring of processes and documentation, in the implementation of these processes, definition and action of risk management analysis, operation, among other critical activities.

All activities carried out were supported by INTEGRITYGRC platform, which has a proven effectiveness of more than 40% at the time of its implementation, taking into account the functionalities provided by the platform that fully support all key activities in the implementation of a given standard or regulation, from the documentary components to ensuring its connection with the operational component.

  Challenge:

The Client has a very considerable set of business applications, with very sensitive data and financial transaction support, and with a high dynamic of updates.

The Client felt that the traditional test model could not keep up with the dynamics of their business requirements, as well as felling a lack of agility in the reporting process and management of the results of their Pentesting actions.

  Solution:

This customer's requirements were immediately matched by KEEP-IT-SECURE-24 Persistent Testing service that Devoteam Cyber Trust launched in 2013.

Through this service the client has Persistent Pentesting performed, integrated in its change management cycle and with manual in-depth tests performed by Devoteam Cyber Trust'S certified team.

As a deliverable of this service, the client has access to the service platform where he can manage the lifecycle of vulnerabilities, ensure the interaction between the resolution teams and the Devoteam Cyber Trust testing team, dynamic generation of reports and support during the effective resolution of vulnerabilities.

  Challenge:

As an industry leader our client strives to introduce the latest technologies in its industry in order to achieve insightful data from camera real time video streaming. The process used to capture video and execute analysis relies on the geographical distribution of cameras that sometimes might not be connected to trusted environments and will need to connect in a secure way to our client infrastructure.

Our client asked us to subject their star product, a Smart Camera, to in-depth security testing.

  Solution:

The requirements posed by our client were addressed by a Pentest project considering multiple threat vectors. The approach included the following scenarios:

• Physical access to the camera was considered since the cameras are placed often in unsecure areas and a potential attacker can access them to gather knowledge or compromise the system;
• Wired and Wireless network access to the camera was considered a valid vector since the cameras are usually placed in unsecured networks that can be accessed by potential attackers;
• The API endpoints directly consumed by the camera on our client infrastructure were also targeted.

The approach encompassed the following steps:

• 1st step - research the solution and understand the role of each block;
• 2nd step - do a threat modelling exercise and decide which vectors to analyse first (network, hardware, application);
• 3rd plan and execute.

Some of the techniques used:

• Research the hardware to understand the chips and suppliers used;
• Subvert boot using serial connection;
• Tests and Wi-Fi enrolment (mobile app - camera activation);
• Detach the SSD M2 disk from the camera to read the information;
• Intercept communications from Ethernet ports;
• Test camera exposed services;
• Boot operating system (alternative) through the Micro SD-Card slot;
• Certificate Authority (CA) installation on the camera operating system to perform MiTM.

The Pentest project enabled the discovery of multiple important vulnerabilities that were promptly solved by the client, reducing the risk to the client's organisation and solution users. Findings range from the ability for an attacker to access to video footage by accessing internal storage of the camera, the ability to compromise the camera and intercept communications and also the ability to compromise the analysis backend of our client's infrastructure.

  Challenge:

The client sought to improve its security posture and response protocols to better defend against cyber threats, such as targeted attacks or ransomware. Its aim was to identify weaknesses in their systems and processes.

  Solution:

We provided a Red Team service covering different tactics, techniques, and procedures (TTPs) emulating targeted attacks and ransomware. During the exercise, our team carried out various activities to gather information on the client's exposed attack surface.

Intrusion actions were triggered from the outside using social engineering and technical exploitation of vulnerabilities, culminating the exercise with data persistence and exfiltration.

After the execution of the exercise, we provided a detailed description of the actions performed, attack paths used, and vulnerabilities exploited in order for the client to analyse and improve the overall posture, including detection and response processes.

During the process, we worked with the client's SOC/Blue Team to help identify blind spots, and help assess the improvements implemented after the exercise.

  Challenge:

The Client was experiencing rapid growth, leading to increased complexity in their IT infrastructure and a heightened need for robust information security and cybersecurity measures. They lacked the internal expertise and resources to establish a dedicated IT Ops & Security department, leaving them vulnerable to operational inefficiencies and security risks. Specifically, they faced the urgent need to:

• • Establish a structured approach to managing IT operations, infrastructure, information security and cybersecurity.
• • Develop a roadmap for building the department, defining roles, responsibilities, processes and technology.
• • Implement best practices for IT operations and infrastructure management, including cloud infrastructure, network optimisation, and system monitoring.
• • Establish a robust information security and cybersecurity program, incorporating industry best practices.
• • Ensure compliance with relevant industry regulations and standards.

  Solution:

Conducted a comprehensive assessment of the existing IT operations, infrastructure management, information security and cybersecurity posture.

Developed a tailored roadmap for the creation and initialisation of the new IT Ops & Security department, outlining key milestones and deliverables.

Implemented best practices for IT operations, infrastructure, including cloud security, network security, and data protection.

Developed and implemented a comprehensive security framework encompassing policies, procedures, and technical controls to mitigate risks across all levels of the organisation.

Provided training and mentorship to the client's internal team.