gvtcx

Website Penetration Test

CRANFIELD UNIVERSITY Published 15 Feb 2016 Contracts Finder

key details

Statusactive
Category (CPV) 72222300
RegionEast of England
Deadline24 Feb 2016
Contract start8 Mar 2016
Contract end4 Apr 2016
Procedureopen
SME suitableNo
OCIDocds-b5fd17-501dd936-adc9-11e6-9901-0019b9f3037b

description

The overall aim of the project is to independently measure the effectiveness of security controls within the website, from an external perspective, outline any vulnerabilities and recommend improvements. Specific objectives are:

Assess the level of exposure that the site could present
Assess whether access levels can be escalated (known as privilege escalation)
Assess whether an unauthorised user can modify the site contents for other users
Assess whether any forms on the site allow unauthorised modification of data outside their intended purpose (i.e. SQL Injection attacks)
Assess the level of this exposure from an external attack (in regards to the protection of data held in the system) to ensure that security controls and coding controls are fit for purpose
Measure the degree of compliance with good practice
Identify actions that will reduce any identified risks to an acceptable level
Recommend improvements in security controls to prevent unauthorised access and misuse of the service (i.e. obtaining data of registered users of the site)

Additional information: To register for this opportunity please use the URL link below:- https://in-tendhost.co.uk/cranfielduni/aspx/

Is a Recurrent Procurement Type? : No https://in-tendhost.co.uk/cranfielduni/aspx/

documents

Documents are linked, not mirrored. They are served by the publishing authority and may require registration.

notice history

1 notice published against this procurement.

PublishedTypeRegimeNotice
18 Nov 2016 Tender (tender) · feb75ee3-a9bc-4dbf-bab8-2769e5aa6dc0-87587

more from CRANFIELD UNIVERSITY

similar contracts awarded

Other awarded contracts in the same category. Useful for seeing who normally wins this kind of work, and at what value.

source

Published on Contracts Finder. Contact details for named individuals are not reproduced on this site.