Information Security Center
MITRE's Information Security Center has been protecting the nation's
cyber systems from hackers, viruses, and
cyber terrorists for more than 25 years. The Information Security Center
uses the most advanced security technologies to tackle the latest cyber concerns. Our works spans the
following areas:
Defense-Information Assurance Red Team
Established
a uniform penetration testing approach that is employed throughout the
Department of Defense
Banking and Finance
Performed security assessment
for a major banking system—our recommendations for 21st century
enhancements were accepted
Land Information Warfare Activity
Developed and
implemented an Army Computer Emergency Response Team
Intelink
Used Internet technologies to develop secure
means for Intelligence Community to share information
National Information Assurance Partnership
Played
an instrumental role in establishing the joint NSA/NIST commercial IT
security testing laboratory infrastructure
Our staff members' areas of expertise include:
Research
Pushing information security boundaries
to find new solutions to customer problems
Security Engineering
Assessing customer security
needs and engineering customer-tailored solutions to meet those needs
Security and Information Operations
Providing operational
information security support to customers, including incident analysis
and response, computer forensics, and exercise participation
Strategic Planning
Anticipating future information
security challenges and identifying strategies to meet them
Security Analysis and Testing
Evaluating the security
of information technology products and systems through analysis, penetration
testing, vulnerability assessments, and red teaming
Prototype Development
Developing security tools
that fill technology voids and making our war chest of tools available
to the customer community
Process, Policies, and Practices
Defining approaches
to improve customers' information security processes, policies,
and practices.
- Advanced authentication
- Anti-viral technology
- ATM
- Computer forensics
- Cryptography
- Intrusion detection
- Firewalls
- Network protocols
- Penetration testing
- PKI
- Red teaming
- VPN
- Web security
|
