Most organizations rely on networked information processing systems as the lifeblood of their operations. Most professionals are also aware of the vulnerability of those systems to unauthorized intrusion and of the damages intrusions can inflict. Whether an intrusion is conducted by a skilled outsider with criminal intent, an adolescent hacker seeking a thrill, or a disgruntled employee bent on revenge or espionage, the potential risks to the organization are enormous. MSMA has the specialized skills and operational experience to offer its clients improved network security, to determine the progress of an attack, and to conduct the analysis necessary to identify and prosecute the attacker.

Computer Forensics & Intrusion Analysis

Computer forensics is the art and science of identifying, locating, preserving, and extracting digital data from a computer system for a specific purpose, such as to provide evidence of a crime or to confirm a violation of corporate policies. Because computers retain more data than most people realize, a skilled examiner, using special tools and protocols, can often reconstruct the activities of a computer user or intruder and extract evidence of the intruder’s actions. MSMA computer forensic services include:

Computer crime response and recovery operations
Multi-tasked Intrusion & Penetration Tests
Simultaneous Forensic & Intrusion Analysis
Vulnerability Analysis
Network Topology Emulation
Network Threat Simulations
CND/CNA Tool & Technique Training

Counter-Intrusion Support

Counter-intrusion support services are directed at two fundamental problems: minimizing client vulnerability to computer intrusion and maximizing the ability to detect, deter, neutralize, and identify the attacker in the event of an intrusion. MSMA focuses on preventive design measures that also facilitate the client’s ability to detect and deter an attack. Examples of our counter-intrusion support services include:

Network threat identification and risk assessment
Secure network design and testing
Laboratory analysis of client software architectures and applications
Analysis and simulation of defensive network architectures and operations
Development of counter-virus and secure network approaches
Network monitoring and intrusion detection
Design, implementation, and testing of secure digital authentication systems

Penetration Testing and Network Simulation

MSMA has a state-of-the-art forensics and counter-intrusion laboratory to support our clients in developing and maintaining secure networks and systems. The laboratory is fully tooled to permit in-depth penetration testing of client systems and networks from a highly secure environment. Its design also permits offsite simulation of a client network for penetration testing without risk to the client’s ongoing operations. Our laboratory features:

Full compliance with DCID 1-21 security standards
Ability to conduct multiple simultaneous digital analyses or investigations
Ability to conduct multiple simultaneous penetration or intrusion testing operations
Hardware and software that can be readily re-configured to simulate client networks
Support for all commonly available hardware platforms, operating systems, and networking software
Support for testing multiple network firewall technologies and approaches
Full suite of analytical tools and “hacker” technologies
Capability to conduct detailed media analysis and data recovery

Skilled, Experienced Analysts

Essential to conducting effective computer forensics and counter-intrusion analysis is the skill and experience of the analysts. Our technical experts average over 15 years of direct experience in computer forensics and information operations. They offer a formidable mix of experience in military and civilian counter-intelligence, criminal investigation, and network security engineering. We know MSMA can provide world-class client support in these difficult technical regimes because our people “have done it before.”

Computer Forensics and Counter-Intrusion Training

Most organizations that depend on secure, reliable networks want to operate those networks with minimal outside technical support. To assist in accomplishing this objective, MSMA offers training opportunities in the disciplines and techniques that we use to provide premium computer forensics and counter-intrusion support.