MindTree Security Testing Services

As the global economy recognizes a serious threat from terrorism, data pilferage, and even sabotage, the need for secure and reliable service delivery has never been higher. Businesses, customers and individuals, have all been plagued with the fear of privacy violation and other monetary as well as repute losses. However, these trying times also pose a fantastic opportunity. If customers can identify with a reliable and secure service, a business can significantly increase loyalty and build a sustainable advantage that will be difficult to beat any other way. Enhanced security in the client-server, and web based applications has always been high priority for an organization. Today it has assumed even greater significance due to dependence on the internet and many other communication tools. Customers are also more aware of the risks involved in harnessing insecure applications or products and therefore naturally tend to be loyal towards trusted services.

Whats on your mind?

Are you confident that your applications are 100% secure? Are you using the right tool to accelerate your security testing process? Are you prepared for future security vulnerabilities?

MindTree brings with it years of experience, and the expertise to secure any application or product from current and future vulnerabilities. With a focused research team having in-depth proficiency in Security Testing, MindTree is the right partner to help identify and address security concerns across any industry. Our security testing services ensure: ! Applications are secure against known and unknown vulnerabilities ! Application data is secure and hack proof ! Applications are compliant with all security regulations

Security Testing Offerings

MindTree provides end-to-end security testing services that covers all web and client-server applications. Four sub-services are offered to meet your short-term and long-term security needs.
Architectural Risk Analysis Threat Modeling Application Penetration Testing

Risk-Based Application Testing

Passive Security Testing ! Social Engineering ! Data Privacy Active Security Testing ! Breaking application from Hackers perspective ! Securing Applications against OWASP top 10 vulnerabilities

MindTree, as your independent testing partner, certifies that your application has been tested using specific application security tool, such as IBM Rational AppScan, Cenzic Hailstorm.

Analysis and Certification

Security Testing Offerings

Application Penetration Testing

Compliance Testing

PCI - DSS (Payment Card Industry Data Security Standard) ISO 27001 SOX

www.mindtree.com

Security Testing Methodology

Understand application security architecture

Threat model analysis

Use vulnerability best practices checklist and perform exposure analysis

Vulnerability reporting

Security Testing Methodology

Code scanning & static analysis

Identify possible attack surface

Use test case preparation checklist to collect information

Test planning design and execution

Vulnerability audit

Use audit checklist to validate design

MindTree's systematic security testing methodology deals with the following security threats to ensure that mitigation techniques work as expected: ! ! ! ! ! Identity spoofing Data tampering Illegal access Service attacks Buffer overruns MindTree Customer Success Stories ! ! ! Appscan Certification and compliance for a expense management solution PCI compliance testing for a leading online sales application Certifying the application against OWASP vulnerabilities for a leading document sharing company

MindTree Differentiators ! ! ! ! ! Partnered with some of the industry's best security solutions providers Proprietary tools to accelerate processes and increase security coverage Experts to audit application design and recommend updates for improved security Knowledgebase of domain specific vulnerabilities and threats Offerings backed by dedicated business units of independent testing and infrastructure management services

ABOUT MINDTREE
MindTree Ltd. is a global IT Solutions Company specializing in IT Services, Product Engineering, Infrastructure Management and Technical Support (IMTS), Independent Testing, and Knowledge Services. MindTree partners with its clients to create a transparent, value-based relationship. Our people build innovative solutions in a wide range of technology domains that enable our customers to succeed in their business goals.

USA | India | United Kingdom | Singapore | United Arab Emirates | Sweden | Germany | Japan | Australia website: www.mindtree.com | email: info@mindtree.com 2009 MindTree