Many organizations which believe that menu-based security is sufficient to protect their IBM i data scoff at the idea that their information is vulnerable. So why not prove it? 

Penetration Testing for IBM i will provide you with the proof that users can access information from outside of your application menus … or they can’t. Or perhaps you haven’t made this assertion but it’s coming from your application vendor. Yet you’ve seen presentations and read articles that make you uncomfortable and you’re wondering whether the assertion that menu-based security is sufficient to protect your organization’s data is true. Why not get evidence – one way or the other? 

DXR Security’s Penetration Testing for IBM i can give you peace of mind and help you determine whether your menu-based security is sufficient to protect your organization’s data. We do that by performing “gray box” pen testing. In other words, we use information about security-relevant system values as well as the authority settings of application libraries and database files together with user profiles that represent a cross-section of roles (end-users, operators and programmers, for example).  With this information, we’ll attempt to gain access to and perform tasks on your IBM i. Penetration Testing for IBM i is a great add-on to network penetration tests which identify open ports and unsecure protocols. DXR Security takes penetration testing to the next level by attempting to run various tasks directly on the system with the intent of accessing application data (without going through a menu.) Once testing is complete, we’ll provide an easy-to-read report describing the results and provide specific recommendations for hardening security, should any vulnerabilities be identified.

The greatest benefit from DXR Security’s Penetration Testing for IBM i is the proof of whether or not your IBM i security configuration is working as expected. Use this proof as peace of mind that your menu-based security is sufficient or to develop actions to make changes.

Contact DXR Security today to see how pen testing can give you proof your security is working. Or visit https://www.dxrsecurity.com/.

 

Carol Woodbury is IBM i Security SME and Senior Advisor to Kisco Systems, a firm focused on providing IBM i security solutions. Carol has over 30 years’ experience with IBM i security, starting her career as Security Team Leader and Chief Engineering Manager for iSeries Security at IBM in Rochester, MN. Since leaving IBM, she has co-founded two companies: SkyView Partners and DXR Security. Her practical experience and her intimate knowledge of the system combine for a unique viewpoint and experience level that cannot be matched.

Carol is known worldwide as an author and award-winning speaker on security technology, specializing in IBM i security topics. She has written seven books on IBM i security, including her two current books, IBM i Security Administration and Compliance, 3^rd Edition and Mastering IBM i Security, A Modern, Step-by-Step Approach. Carol has been named an IBM Champion since 2018 and holds her CISSP and CRISC security certifications.

---

MC Press books written by Carol Woodbury available now on the MC Press Bookstore.

		IBM i Security Administration and Compliance: Third Edition Don't miss the newest edition by the industry’s #1 IBM i security expert. List Price $71.95 Now On Sale
		Mastering IBM i Security Get the must-have guide by the industry’s #1 security authority. List Price $49.95 Now On Sale