{"id":4911,"date":"2020-06-10T08:07:15","date_gmt":"2020-06-10T06:07:15","guid":{"rendered":"https:\/\/ditech.media\/?p=4911"},"modified":"2020-06-11T09:47:21","modified_gmt":"2020-06-11T07:47:21","slug":"red-team-of-white-hackers-how-crackers-help-business","status":"publish","type":"post","link":"https:\/\/ditech.media\/news\/red-team-of-white-hackers-how-crackers-help-business\/","title":{"rendered":"Red Team of White Hackers: how \u00abcrackers\u00bb help business"},"content":{"rendered":"

Cyber attacks on banks, states and citizens’ computers have been the commonness for a long time. The word \u201chacker\u201d in the mass consciousness is inextricably linked with the theme of cybercrime. Nevertheless, a hacker is not necessarily an attacker: advanced \u201ccrackers\u201d can not only disturb peace, but also know how to protect it.\u00a0<\/span><\/p>\n

Let’s talk about white hackers` work and their usefulness for your business.<\/span><\/p>\n

\u0421ompanies are interested in protecting data: leaks lead to serious financial and reputational losses. Information security is neither a result nor a condition. This is an ongoing process. In order for the company\u2019s employees, who are responsible for cybersecurity, to be able to timely detect and correctly respond to a gap in the system, it is necessary to constantly increase the professional level of the team.<\/span><\/p>\n

The information security market offers several services for analyzing company’s security: analysis of systems` and applications` security, penetration testing (pentests), assessing personnel awareness of information security issues, etc., but the most effective method, in our opinion, is the method named \u00abRed Team\u00bb*.<\/span><\/p>\n

This method is similar to the traditional penetration test (pentest), which is used to check networks, services, systems and wireless access points, but do not mix them up. Pentesting – assessment of passive security of information systems, Red Teaming – assessment of active security. Pentest experts visit the customer with scanners and other equipment and, without hiding, try to \u201chack\u201d the system (I\u2019ll say right away that the statistics are disappointing). After checking and analyzing, they write a progress report about the presence of vulnerabilities and also give recommendations for their elimination.<\/span><\/p>\n

Red Team – \u201cbattle check\u201d. White hackers have extensive knowledge of attack methods. Firstly, they gain experience during pentests, and secondly, they study the world practice of real hacker attacks. During the Red Team, hackers imitate a real cyber attack. Naturally, an \u201cattack\u201d takes place according to predetermined scenarios and does not interfere with the operation of the company’s critical information systems. Careful preparation and study of the systems allows the attack to be carried out accurately and as close to reality as possible. This, of course, directly depends on the experience and level of qualification of the Red Team. The exercises and fakeattack are reported to a very narrow circle of people so that the rest of the staff behave naturally.<\/span><\/p>\n

The goal of the Red Team, is to achieve the set goals, for example:<\/span><\/p>\n

to penetrate the system, steal data, fix the process of \u201chacking\u201d and tell the \u201cblue team\u201d (customer side) about the mistakes made and ways of eliminating them. It turns out that the knowledge and skills of the \u201cblue team\u201d, the company’s internal experts, are growing because the \u201cred team\u201d\u00a0 provides an ever-higher level of attacks.<\/span><\/p>\n

Red team is more time-consuming and labor-intensive than a pentest. But it allows you to solve several problems at once:<\/span><\/p>\n