Penetration Testing of Session Border Controller

This case study examines an engagement with a North American Tier-1 carrier that commissioned Spirent SecurityLabs to conduct penetration testing and a Host Security Review of their session border controller.

Spirent’s penetration tests conform with the recommendations in NIST 800-115 section 5. The process consists of multiple phases – planning, reconnaissance, scanning, exploitation, post-exploitation, and reporting.

Spirent’s team of experts identified numerous critical and high-severity issues in the deployed version of the SBC that posed a significant risk to the asset, its network, and other assets in conjunction with the business unit and organization, or its customers.