Secured the investment portfolio management system against cyber-attacks

Cyber security


Executive Summary

A leading US based specialized Investment Advisory Consultancy firm with a global presence has developed a web application that allows customers to access their investment portfolio. Futurism Technologies is engaged with this Investment Advisory firm to secure their Investment Portfolio Management system against cyber-attacks to provide a threat free application to their customers.

Client Challenges

  • The platform was built on open source technologies, it was subjected to repeat hacking there by leading to business shutdown and loss of sensitive data.
  • The customer worked with Futurism Technologies to define proactive steps to validate security controls of the application and infrastructure. This decision was made considering the vulnerability of web applications, and importance of data and trends in IT security management.
  • During the VAPT (Vulnerability Assessment and Penetration Testing), we found several security vulnerabilities in the web application, such as SQL injections, cross-site scripting, etc. The critical fault was ‘Insecure file upload’, which allowed uploading exploited script, which allowed the user to get complete read-write access to the confidential database.

Technology Stacks

  • SQL Injection
  • Penetration Testing Tools

Our Solutions

  • Evaluate weakness of overall solution from Security point of view (RA)
  • Analysis of architectural and system configuration.
  • Gap analysis for Identification of vulnerabilities
  • Assessment for penetration testing (VAPT)
  • SSH and SSL attacks (Man in the Middle) and Brute Force tests on proprietary protocol
  • Open Ports and Vulnerability Scanning; Patch Auditing
  • WEB Interface vulnerability scan and SQL Injection
  • Robustness Tests on SIP and HTTP Interfaces
  • Assessment reporting with security improvements recommendations

Quantifiable Benefits

  • Uninterrupted Business Continuity
  • Proactive measures to alert the firm as well as their customers
  • Secured application platform, improved uptime and improved customer satisfaction.
  • Secured application helped to secure sensitive investment data
  • Offered a cloud based and on-demand security platform
  • Built hybrid solution which blends automated testing with security expert analysis
  • Developed blended model provides the best quality test coverage while accelerating the test time.

About Futurism Technologies

Futurism Technologies is a global business leader, that bringing 360-degree Digital Transformation for business enterprises of various sizes, as well as technology providers by delivering assured business efficiency through a set of new-age technologies. We provide end-to-end high quality and cost-effective IT services to a variety of industries. With state of the art offices in India, US, UK, Australia, and UAE, we have become a global trusted partner of our clients by delivering age-defining and convention-defying digital transformation solutions.