Skip to content
Tenfell
Closed tender
Published 15 Feb 2016

Website Penetration Test

Cranfield University · East of England

Key facts

Closing date
24 Feb 2016
Contract starts
08 Mar 2016
Contract ends
04 Apr 2016
Procedure
Open procedure
Buyer type
Education

Description

The overall aim of the project is to independently measure the effectiveness of security controls within the website, from an external perspective, outline any vulnerabilities and recommend improvements. Specific objectives are: • Assess the level of exposure that the site could present • Assess whether access levels can be escalated (known as privilege escalation) • Assess whether an unauthorised user can modify the site contents for other users • Assess whether any forms on the site allow unauthorised modification of data outside their intended purpose (i.e. SQL Injection attacks) • Assess the level of this exposure from an external attack (in regards to the protection of data held in the system) to ensure that security controls and coding controls are fit for purpose • Measure the degree of compliance with good practice • Identify actions that will reduce any identified risks to an acceptable level • Recommend improvements in security controls to prevent unauthorised access and misuse of the service (i.e. obtaining data of registered users of the site)

Additional information: To register for this opportunity please use the URL link below:- https://in-tendhost.co.uk/cranfielduni/aspx/

Is a Recurrent Procurement Type? : No https://in-tendhost.co.uk/cranfielduni/aspx/

Categories (CPV)

Similar open tenders

About Cranfield University

Their tenders, awards, contracts coming up for renewal, decision makers and committee papers.

View buyer profile

Published by the buyer on Contracts Finder archive (Open Contracting) (Open Government Licence v3.0). Always read the original notice before responding.