A penetration test of an Internet service provider: Computer Forensics and Information Security
Independent thesis Basic level (degree of Bachelor), 10 credits / 15 HE creditsStudent thesis
Computer security is of ever increasing importance in the modern corporate world due to the risk of disclosing sensitive assets. In a world where technology can be found in most organizations and businesses the importance of ensuring secure assets is not only a good habit but a necessity.This study concerned an Internet service provider in south western Sweden who saw an interest in ensuring the security of their computer systems. The Internet service provider wished to remain anonymous to protect its name and interests in casesensitive information were to be disclosed.The approach to test the service provider’s security was to perform an extensive penetration test of the ISP's relevant network and computer infrastructure. The aims of the penetration test were to map vulnerabilities and assess the risk that a possible flaw would pose if exploited.The results indicated that the systems of the ISP included several critical flaws that could lead to a denial of service condition and a complete compromise of the service provider’s office intranet. Furthermore the results indicated the possibility that the Internet service provider had in fact already been hacked by an unknown perpetrator.Finally the study was beneficial for the Internet service provider since they were provided with a deeper understanding of the security flaws in their computer system infrastructure. Moreover they were alerted to the presence of a possible crime scene on their property.
Place, publisher, year, edition, pages
2012. , 53 p.
Other Engineering and Technologies not elsewhere specified
IdentifiersURN: urn:nbn:se:hh:diva-18169Local ID: IDE1256OAI: oai:DiVA.org:hh-18169DiVA: diva2:536011
anonym Internet leverantör
Subject / course
Torstensson, Olga, Universitetsadjunkt
Bilstrup, Urban, Universitetsadjunkt