GMO Attack Surface Management

GMO Attack Surface Management enables anyone to easily achieve ASM through tools and consulting. You can discover vulnerabilities in external public assets on AWS using GMO Attack Surface Management. The specific process for utilizing this service is as follows:

1. Discovery of Attack Surface GMO Cybersecurity by Ierae's white hat hackers inventory your company's externally exposed IT assets from an attacker's perspective. 2. Information Gathering on Attack Surface Through regular diagnostics using tools, vulnerability information is automatically collected once a week, and ad-hoc diagnostics can be performed as needed. 3. Risk Assessment Based on the impact, the tool automatically ranks vulnerabilities, and security consultants provide advice on prioritization. 4. Risk Mitigation Execute the countermeasures displayed by the tool. If there are any unclear points, security consultants will provide support.

AWS products related to countermeasures for diagnostic results (security findings) by GMO Attack Surface Management.

• Indications regarding lack of HTTP secure header => CloudFront function
• Use of software with known vulnerabilities (missing updates to old libraries) => Amazon S3, AWS lambda, Amazon ECS, etc.
• Exposure of unnecessary services, use of software with known vulnerabilities (SSH, etc.) => Amazon EC2

For more details, please refer to [our company's website](https://product.gmo-cybersecurity.com/net-de-shindan/lp_enterprise/?gad_source=1&gclid=Cj0K […]ydaI5tOg1ycyYPijMw7Agsq6iTL9QqKGimfZtIw00aAsCnEALw_wcB).