Most organizations rely on networked information processing systems as the lifeblood of their operations. Most professionals are also aware of the vulnerability of those systems to unauthorized intrusion and of the damages intrusions can inflict. Whether an intrusion is conducted by a skilled outsider with criminal intent, an adolescent hacker seeking a thrill, or a disgruntled employee bent on revenge or espionage, the potential risks to the organization are enormous. ManTech Security & Mission Assurance (MSMA) has the specialized skills and operational experience to offer its clients improved network security, to determine the progress of an attack, and to conduct the analysis necessary to identify and prosecute the attacker.
Computer Forensics & Intrusion Analysis
Computer forensics is the art and science
of identifying, locating, preserving, and extracting digital data
from a computer system for a specific purpose, such as to provide
evidence of a crime or to confirm a violation of corporate policies.
Because computers retain more data than most people realize, a
skilled examiner, using special tools and protocols, can often
reconstruct the activities of a computer user or intruder and
extract evidence of the intruder's actions. MSMA computer forensic
services include:
- Computer crime response and recovery operations
- Multi-tasked Intrusion & Penetration Tests
- Simultaneous Forensic & Intrusion Analysis
- Vulnerability Analysis
- Network Topology Emulation
- Network Threat Simulations
- CND Tool & Technique Training
Counter-Intrusion Support
Counter-intrusion support services are directed
at two fundamental problems: minimizing client vulnerability to
computer intrusion and maximizing the ability to detect, deter,
neutralize, and identify the attacker in the event of an intrusion.
MSMA focuses on preventive design
measures that also facilitate the client's ability to detect and
deter an attack. Examples of our counter-intrusion support services
include:
- Network threat identification and risk assessment
- Secure network design and testing
- Laboratory analysis of client software architectures and applications
- Analysis and simulation of defensive network architectures and operations
- Development of counter-virus and secure network approaches
- Network monitoring and intrusion detection
- Design, implementation, and testing of secure digital authentication systems
Penetration Testing and Network Simulation
MSMA has a state-of-the-art
forensics and counter-intrusion laboratory to support our clients
in developing and maintaining secure networks and systems. The
laboratory is fully tooled to permit in-depth penetration testing
of client systems and networks from a highly secure environment.
Its design also permits offsite simulation of a client network
for penetration testing without risk to the client's ongoing operations.
Our laboratory features:
- Full compliance with DCID 1-21 security standards
- Ability to conduct multiple simultaneous digital analyses or investigations
- Ability to conduct multiple simultaneous penetration or intrusion testing operations
- Hardware and software that can be readily re-configured to simulate client networks
- Support for all commonly available hardware platforms, operating systems, and networking software
- Support for testing multiple network firewall technologies and approaches
- Full suite of analytical tools and "hacker" technologies
- Capability to conduct detailed media analysis and data recovery
Technical Operations Support. Deployment of tactical computer forensic teams to perform investigations and analysis on-site) This section includes the following as sub categories:
- Information Operations
- SIGINT & COMINT Deployment and Collection Operations
- Physical Security and Penetrations
- Special Operations- Planning and Mission Execution
- Foreign Language Support
- Readiness Review and Evaluation Training
E-Discovery & Litigation Support
- Data Recovery
- Expert Witness Testimony
System Engineering. This includes the following subcategories:
- Computer Forensics Lab Development
- New Lab Creation
- Automated Processing & Procedures
- Short and Long Term Storage Solutions
- Remote and Distributed Processing Development
- Systems Integration
- Collection Systems
- Communications Systems
- Intelligence Reporting Systems
Corporate Due Diligence
- Individual Risk Profiles (IRP)
- Organizational Risk Profiles (ORP)
Intelligence Analysis
- Matching Information to Collection Requirements
- Link Analysis
- Order of Battle Analysis
- Data Mining
- Regional Issues
Foreign Language Support
Training
- Computer Forensics
- Scalable Seminars
Skilled, Experienced Analysts
Essential to conducting effective computer
forensics and counter-intrusion analysis is the skill and experience
of the analysts. Our technical experts average over 15 years of
direct experience in computer forensics and information operations.
They offer a formidable mix of experience in military and civilian
counter-intelligence, criminal investigation, and network security
engineering. We know MSMA can provide
world-class client support in these difficult technical regimes
because our people "have done it before."
Computer Forensics and Counter-Intrusion Training
Most organizations that depend on secure,
reliable networks want to operate those networks with minimal
outside technical support. To assist in accomplishing this objective,
MSMA offers training opportunities
in the disciplines and techniques that we use to provide premium
computer forensics and counter-intrusion support.