ITGLOBAL.COM Performed Penetration Test to Improve Digital Attitude Security
Nov 20, 2020
Digital Attitude is an Italian virtual training developer, offering a habit-inspiring platform: a tool that helps to form new soft skills in corporate software usage. The key project of Digital Attitude is a virtual trainer for Microsoft Office 365 users. It teaches customers a variety of skills.
The habit-inspiring concept is based on the nudge theory of Richard Thaler, the 2017 Nobel Prize winner in (behavioral) Economics. Digital Attitude itself is a "golden partner" of Microsoft, winner of the Digital Transformation Champ Awards 2020. The company's clientele includes oil production, banking, insurance and healthcare.
Caring for protection
Both Digital Attitude network and operations are designed with high security level in mind. As per Denis Sumin, full stack developer and IS specialist of Digital Attitude, "Every customer has the ID only. We store no emails, or names, or IP addresses - everything is almost anonymous. Yet we permanently care that even these IDs wouldn't leak anywhere."
The habit-inspiring platform is also protected. No developer has access to the production version of habit-inspiring, so an independent production deployment is impossible: it deploys automatically via a specific AWS account. Every commit is digitally signed; the forgery is, again, impossible. Each pull request is verified by at least two developers, so the harmful code insertion requires the cahoots of at least three individuals.
"We have everything firmly set inside. But the outer area is beyond our control, so we decided for the penetration test to strengthen the network security," concluded Denis Sumin.
The test & the tester
Black Box pentest model presumes that the intruders have no knowledge of the company and its systems - so only attacks on public resources, starting from the external IP addresses and public URLs, are imitated. Pentest also scrutinizes mail, terminal and file servers, as well as the other web services that revealed an access upon scanning.
ITGLOBAL.COM with the headquarters in Saint-Petersburg, Russia was chosen by Digital Attitude after thorough consideration. In particular, none of the candidates from the West was able to denote any timeline for pentest preparations and initial procedure. At first Digital Attitude did not consider a Russian company, but ITGLOBAL.COM appeared to suit all the requirements of the Italian developer.
The outcome: problem positively solved
The penetration test had shown the single medium level vulnerability at Digital Attitude, the Cross-Site Scripting. Imitating the attack, ITGLOBAL.COM testers managed to insert into the page their script that was executed on the customer's side. The vulnerability was immediately patched via Content Security Policy; as of now the scripts at Digital Attitude are signed with the additional certificate. As per Alexander Zubikov, ITGLOBAL.COM IS Head, "Even the vulnerabilities of medium-scale can lead to large issues. An intruder can obtain the client's version of habit-inspiring - and get access to a customer's computer. Or alter the original content of Digital Attitude, thus undermining the trust to the company. Or simply steal customer's cookies - with well-known aftermaths."
Related Links
ITGLOBAL.COM
Penetration Test
Press Release Service by Newswire.com
Original Source: ITGLOBAL.COM Performed Penetration Test to Improve Digital Attitude Security
More News
Delhi air force ground closure: Why govt is reclaiming prime Lutyens land near PM house including Race Club, Jaipur Polo Ground and Gymkhana Club
The closure of the Air Force Sports Complex on October 28 is the latest development in the government's drive to reclaim prime land near Lok Kalyan Marg. After taking over the Delhi Race Club and Jaipur Polo Ground and terminating the Delhi Gymkhana Club's lease, questions remain over the Centre's plans for these properties.
DHFL Case: Delhi court rejects CBI plea for additional charges against Wadhawan brothers, says it cannot review charge order
A special court in Delhi denied the CBI's request for additional charges against Kapil Wadhawan and Dheeraj Wadhawan. The court stated that it could not review its earlier decisions except for clerical errors. Special Judge Sanjeev Kumar Malhotra noted that charges had already been properly framed against the accused. The CBI's arguments for new charges were deemed unsubstantiated and informal.
DHFL Case: Delhi court rejects CBI plea for additional charges against Wadhawan brothers, says it cannot review charge order
A special court in Delhi denied the CBI's request for additional charges against Kapil Wadhawan and Dheeraj Wadhawan. The court stated that it could not review its earlier decisions except for clerical errors. Special Judge Sanjeev Kumar Malhotra noted that charges had already been properly framed against the accused. The CBI's arguments for new charges were deemed unsubstantiated and informal.
Elon Musk warns ‘game over’ if Democrats sweep 2028 elections
Elon Musk has urged voters to back Republican Senate candidates in the November 3 midterms, warning that a future Democratic sweep of the presidency and Congress could lead to changes such as DC and Puerto Rico statehood and an expanded Supreme Court. His intervention comes as he pours hundreds of millions of dollars into Republican candidates and political groups, making him one of the most influential donors of the election cycle.
Noel Tata sends two letters over SPG's Rs 25,000 crore request and to evaluate merger options to avoid D-St listing
Noel Tata sends two letters to Tata Sons Board today: to examine a Rs 25,000 crore funding request from minority shareholder Shapoorji Pallonji (SP) Group through a proposed capital reduction and detailed evaluation of a restructuring proposal made by Sir Dorabji Tata Trust and Sir Ratan Tata Trust on September 28 to merge two operating subsidiaries, Tata Electronic Systems Solutions (TESS) and Tata Consulting Engineers (TCE), with Tata Sons.
Protest against liquor policy in Ladakh suspended after govt agrees to all demands: Wangchuk
Women's organisations in Ladakh suspended their protest against a liquor policy after receiving assurance from the UT administration. The organisations demanded a complete rollback of the liquor policy and preservation of local culture and values. The UT administration agreed to all demands and requested a week's time to formalise the agreement. The interim suspension of protests reflects the organisations' faith in the administration's commitment.
Protest against liquor policy in Ladakh suspended after govt agrees to all demands: Wangchuk
Women's organisations in Ladakh suspended their protest against a liquor policy after receiving assurance from the UT administration. The organisations demanded a complete rollback of the liquor policy and preservation of local culture and values. The UT administration agreed to all demands and requested a week's time to formalise the agreement. The interim suspension of protests reflects the organisations' faith in the administration's commitment.
Bengaluru woman spends over Rs 40,000 on household help in a month, annual cost exceeds Rs 5 lakh; check full breakdown
A woman from Bengaluru has laid bare her monthly household expenses, totaling Rs 42,100. This figure accounts for various services, including a cook, nanny, maid, and extra cleaning help. That equates to an annual expense of Rs 5,05,200 dedicated to domestic assistance alone, excluding grocery and other household costs. This detailed breakdown highlights how quickly such expenses can mount for families in need of multiple services.
SC appoints ex-judge Ranjana Desai as mediator in Reliance gas dispute
The Supreme Court appointed Ranjana Prakash Desai as the mediator to resolve a gas migration dispute. Reliance Industries and its partners are involved in a legal conflict with the government. The dispute revolves around gas extraction and allegations of unjust enrichment from ONGC's adjoining blocks. An earlier arbitration tribunal had ruled in favor of Reliance, rejecting the government's claims.
SC appoints ex-judge Ranjana Desai as mediator in Reliance gas dispute
The Supreme Court appointed Ranjana Prakash Desai as the mediator to resolve a gas migration dispute. Reliance Industries and its partners are involved in a legal conflict with the government. The dispute revolves around gas extraction and allegations of unjust enrichment from ONGC's adjoining blocks. An earlier arbitration tribunal had ruled in favor of Reliance, rejecting the government's claims.
YOUR NEWS, OUR NETWORK.
Do you have Great News you want to tell the world?
Be it updates about your business or your community, you can make sure that it’s heard by submitting your story to our network reaching hundreds of news sites across 6 verticals.