Apriorit - Professional consulting and software development
Home
Corporate Security PDF Print E-mail

Due to the rapid growth of electronic data volumes and also the increase of their importance in business, the market of Corporate Security Software develops successfully. At the same time the perpetual confrontation of those who protect information and those who pretend to steal it develops too. As a result Corporate Security Systems become more scale and complex - it is necessary for the adequate reacting on the new threats produced by fast-developing IT technologies.

In this situation the companies that develop Data Protection Systems (e.g. ILDP, DRM software) face with a question of the effective resource and potential allocation. Threats which the system must react on can arise in the great number of different areas, and a developer must be the real specialist in each of them. The company - developer of the Corporate Security Software - needs professional knowledge, skills and experience in the great number of special areas of the system and advanced programming.

An effective solution is to let professionals do the professional work. Outsourcing of special task solution, individual component implementation allows creators and managers of the system concentrate on their core activity, save internal resources and time.

The team of our experienced professionals will undertake responsibility for the providing of the high-quality effective and ready-to-integrate solution of the complex and non-trivial tasks for your system.

Network Security Team is the most numerous one in Apriorit. It includes several groups of specialists with deep practical experience in particular fields. We have a long-term experience in working with such tasks:

  1. Clipboard monitoring
  2. Print monitoring and controlling
  3. Network monitoring (See Case Study)
    • Instant messengers traffic analysis
    • Web traffic analysis (HTTP/FTP/etc)
    • Email traffic analysis (POP3/IMAP/SMTP/MS Exchange)
    • LAN traffic analysis (SMB/NFS)
    • User login/logout monitoring
  4. Local and Network Data Security (See Case Study)
    • COM, LPT, USB port locking techniques (See Case Study)
    • User specific registry keys/values changing, registry activity monitoring (See Case Study)
    • Network IOCP proxy to substitute security keys exchange such Deffie-Hellman algorithm
  5. Parsers
    • Windows protected storage parsing
    • File system parsing (e.g. NTFS parser)
    • PDA and mobile devices user data parsing
  6. Compatibility and correct work in secure mode
    • Remote silent installation
    • Virtual files and virtual file systems
    • Low level data exchange with hardware (disk serial number, host protected area acquisitions)
    • Embedding into executable files, dynamic libraries and COM objects
    • Compatibility with most popular antiviruses.
    • TCP/IP stack for antifirewall protection
    • Active Directly integration
  7. Brute-force attack with dictionaries for password recovering
  8. Deleted Data Recovering
  9. Keyboard hooking
  10. Boot loader development (int16)

Deep experience of Driver Development and Reverse Engineering allows working with the security tasks at all levels of system functioning.

The examples of our solutions can be found at the Case Study section.

We work with such technologies and tools:

  • GUI: WinForms, WxWidgets;
  • Languages: C++, C, C#, Javascript, wix, XML, XSLT;
  • Libs: STL, BOOST, COM, ATL, MFC, ICU, xerces, MSXML, Loki;
  • Databases engines: Firebird; SQL Server
  • System API: NT kernel API, Win32 API, Winsocks2, TDI filters, FileSystem Filters, virtual storage devices(virtual bus drivers, virtual logical drive drivers, virtual scsi-miniport drivers), MAPI;
  • Special Technics: SST patching, NTOS patching;
  • Tools: VC 7.1 и 8, DDK, WinDbg, VmWare, SQL Management Studio.

If you have any questions about our experience, process or other subjects feel free to contact us.