BOSTON, Dec. 14, 2009 -- Core Security Technologies, provider of CORE IMPACT Pro, the most comprehensive product for proactive enterprise security testing, today announced CORE IMPACT Pro v10, one of the most significant updates ever to its flagship automated penetration testing software solution. This latest version of CORE IMPACT Pro provides IT security managers with an unmatched level of visibility into their enterprise IT risks, allowing them to replicate real-world cyber attacks that reveal critical exposures across a wide range of IT assets.
Among the significant additions included in IMPACT Pro v10 are:
• The addition of integrated wireless penetration testing
• Broader coverage of OWASP top web application risks
• Inclusion of community product usage data
• Support for use on and testing of Windows 7
• Improvements to the product's GUI, agent technology, and much more
"The new wireless attack features and OWASP coverage extends automated penetration testing to the areas of most concerning risk," said Karl Smith, Global Security Architect at BT Global Services. "IMPACT Pro v10 builds upon Core's innovation in leadership in the vulnerability management market."
Integrating Wireless Penetration Testing Capabilities
With IMPACT Pro v10 penetration testing software, organizations can now assess their vulnerability to wireless intrusions leveraging new features that are fully integrated with the product's existing network, endpoint and web applications assessment capabilities. New, real-world security testing capabilities for WiFi networks include:
• Discovery of both known and unauthorized WiFi networks and access points
• Information gathering on network strength, security protocols and connected devices
• Attack and penetration of networks encrypted with WEP, WPA-PSK and WPA2-PSK
• Automated traffic sniffing for finding streams of sensitive data
• Capabilities for joining cracked networks and testing other systems accessible from those networks
• Comprehensive reports of wireless testing activities and findings
• Seamless pivoting between wireless, network, web application and client-side tests, replicating multi-staged attacks that trace chains of vulnerabilities to sensitive backend data
As evidenced in recent attacks carried out against major enterprise companies, including those that have passed mandated compliance audits, unmanaged or improperly secured wireless networks can serve as an initial point of entry for attackers seeking access to protected backend databases. By allowing customers to conduct automated testing across the widest array of threat vectors, IMPACT Pro v10 empowers organizations to gauge their exposure to advanced hacking and malware assaults in the most realistic, comprehensive manner of any product offered on the market today.
"Wireless use has exploded in business and attackers have found many vulnerable WLANs to exploit," said John Pescatore, analyst with Gartner. "Enterprises need to make sure their vulnerability assessment processes incorporate WLAN technologies into both continuous monitoring and periodic penetration testing." (continued...)
|