Network Penetration Methods Empoloyed

individual Internet hosting deployments as part of the creation of security policies for the projects. These were documents held by Security and signed off by the owners of the hosting deployments. I ran teleconferences between company Security the Internet Hosting customers and the company design team members to agree security policy. I was mandated to write on the vulnerabilities and countermeasures for the various types of deployment with reference to the full CVE database as a check on the secure installation of these deployments.

SBS Security Design and Disaster Recovery

http://www.sbs.gov.uk

"The Small Business Service (SBS) is an agency within the Department of Trade and Industry. They provide guidance for small business." The design of VPN security across the company's corporate infrastucture and the designing of backend firewall infrastructures. The politics involved in delivering this infrastucture were not trivial. The firewalling involved separate access to the Public, Infrastucture management, Backup services, Private connections for the government, Application management, Special links to regional business links, Fax server fitted with a security card which only allowed the use of tif files across the fax lines. Additionally, Rightfax software converted incoming faxes to emails which were then forwarded to the eCRM centre (smtp port 25 open to secure the fax links) and lastly private extranet connections. The public access was via the datacentre common front end with separate design for the other accesses. The design included a staging and disaster recovery operation at an alternate site utilising geographically redundant design based on 3-DNS server technology. Security Policy was developed for this deployment.

Application Security Matters

SBS : the backend access between the Small Business Services website designed by the group were difficult to deal with. They