Corporate Solutions

Corporate Cyber Exercises

Test your network through custom cyber exercises. We work with you to replicate portions of your production network within the White Wolf Security sandbox. We then take your information security personnel and place them opposite a professional Red Team of hackers for the duration of the exercise. We will generate individual and team scores, so you can better understand where your team and infrastructure are sound, and where they could use improvement. Best of all, an After Action Review is run where you get to meet and interact with the Red Cell. They will tell you how they got in, stayed in, and what they did while they were in.

How is an exercise different than a Vulnerability Assessment or Penetration Test?

Vulnerability Assessments (VA) and Penetration Tests (PT) are useful measurements. Unfortunately, they only measure a very small handful of items. A VA will generate a list of potential vulnerabilities that were discovered in your environment. This measures your ability to protect your systems. The consultant doing the VA often uses automated tools to generate reports. The VA is only as good as the tool the consultant is using.

A PT tests your ability to keep out an attacker as well as some very basic detection skills. The down side to the PT is that there are limits to what the hired hacker can and cannot do. There are several attacks that are simply not allowed because it puts the production network at risk. Attacks that involve brute force, distributed denial of service (DDoS) and botnets are extremely damaging to production networks and are typically not allowed in the course and scope of a penetration test.

So what is an exercise and how will it benefit my organization?

1. An exercise is safe
1. We replicate pieces of your infrastructure in a sandboxed environment. The sandbox is completely off the Internet and its databases are populated with realistic (but fake) information.
2. Production systems are NOT at risk.
3. Private or sensitive data is NOT at risk.
2. An exercise is all-encompassing
1. Botnet attacks and wide spread DDoS are real threats. An exercise has NO restrictions on the attacks that are launched against your infrastructure.
3. An exercise is multi-disciplinary
1. Real world attacks have real world consequences. In any real world attack you will have to get legal, management and maybe even public relations and law enforcement groups involved. Let's face it, IT security is NOT just about cool technology. There are any number of existing and pending legislations that mandate reporting and auditing.
2. An exercise will test your organizations ability to handle the ENTIRE incident life cycle.
4. Can you?
1. Defend your network under live and directed attacks?
2. Detect successful intrusions and verify their scope?
3. Manage the information handoff from incident response to legal?
4. Identify when the attack has triggered legal reporting obligations?

No other service offering is as encompassing as a White Wolf Security Cyber Exercise.

Corporate Training

White Wolf Security offers custom training programs designed to meet the needs of your information security team. All courses are hands-on and instructor led and available at our Lancaster training facility known as The Center. A portion of our courses are also available on-site using our custom designed Portable Training Labs.

If you are looking for a class, call us today. We have an extensive collection of modules and will work with you to identify your team's specific needs and assemble the appropriate modules for a custom training solution.