 |
 |
 |
| Join Our Mailing List |
|
|
|
| Want to know what's new @ Mu? Enter your email address to receive Mu Dynamics news. |
|
 |
|
|
 |
|
|
Security Testing for Government IP Services
|
|
Mu Helps Government Agencies:
|
|
|
|
One of the main concerns of Government agencies and their supply chain is about testing security and privacy. Product vendors and operators in the Government ecosystem need to pay special attention to both conventional security and Cyber Security aspects of their test processes - during both development and network deployment. There are three aspects to effectively testing for security.
- The test process adopted needs to be dynamic to effectively test against the latest known attacks and weaknesses of software systems. This test input needs to cover the latest known vulnerabilities/attacks and often used vectors to 0-day weaknesses on a regular basis.
- In addition, the Mu Test Suite incorporates a proactive aspect that integrates a protocol fuzzing engine to test for unknown issues. Weaknesses of the IP service being deployed need to be identified proactively before deployment. Moreover, once a underlying software weakness is found there needs to be a systematic approach to classify the weakness into categories and other similar weaknesses belonging to the same category need to be found and fixed.
- Lastly, as operators and their suppliers discover vulnerabilities in IP services they need to quickly reproduce those in the test lab –without the added operational or capital burden of running costly shadow labs - and roll out a fix without side effects.
The Mu Test Suite enables testers to rapidly solve Government IP service testing needs accurately, thoroughly and quickly.
An important application of fuzzing is being used by Mu's government agency customers today when they are selecting new vendor equipment
for use in their future network planning. They deem it critical that all equipment must meet an
established security baseline, especially around interoperability and robustness of the
protocols they intend to use within their networks, especially since their missions are often critical to the operation of the government. One of the
best ways to accomplish this is via fuzzing, either based on open
protocol specifications or on service-specific traffic flows that must
be supported by the government agency's network. Mu's Protocol Fuzzing and Studio Zx modules
make it easy to compare the results of many different target devices to
see which is best able to stand up to invalid or unexpected inputs around
the traffic that the network must support. A network that is constantly subjected to fuzz testing, throughout the deployment life cycle, starting from the earliest phases of vendor selection, is going to experience fewer "surprises" during critical operational conditions.
|
Back to top ^
|
|
 |
 |
