FRIDAY, August 18, 2011 12:00

4Xself

protect

Cyber Security Services

LP3 has been supporting Cyber Security initiatives for over 20 years. Our Subject Matter Experts (SMEs) in Cyber Security provide our customers with Cyber Security expertise by balancing protection and performance and ensuring networked services maintain the highest levels of Confidentiality, Integrity, and Availability as well as system Performance. Our ability to analyze network performance and recognize system and network vulnerabilities enables us to provide our customers with tailored actions in the protection of their most vital systems and networks.

Our Cyber Security services include:

  • Computer Network Defense (CND)
  • Vulnerability Analysis/Detection
  • Incident Response & Management
  • Penetration Testing & Analysis
  • Cyber Threat & Network Anomaly Detection
Information Assurance Services

Information Assurance and IT security compliance are vital to the defense of critical system and networks. LP3 works closely with our customers to ensure that their systems are in compliance with federal and industry Information Assurance standards. Our Risk Management team has extensive experience assessing the entire system environment and highlighting key factors that could affect system integrity or performance. Our personnel are well versed in industry and federal compliance standards.

Our Information Assurance services include:

  • Security Engineering / INFOSEC SMEs
  • Cross-Domain / Multi-Level Security
  • Certification & Accreditation / Assessment & Authorization
  • Navy System Validation
  • Risk Management, Threat & Vulnerability Assessment
  • Industry/Government Compliance – NIST 800-53, DICAP, ICD 503 (DCID 6/3), HIPPA, PCI, Sarbanes-Oxley

Latest Threats

CVE-2013-3270 (vnx_control_station, celerra_control_station)
Sunday, May 19, 2013

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership. .. read more..

CVE-2013-0999 (itunes)
Sunday, May 19, 2013

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05.. .. read more..

CVE-2013-0998 (itunes)
Sunday, May 19, 2013

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05.. .. read more..

CVE-2013-0997 (itunes)
Sunday, May 19, 2013

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05.. .. read more..

CVE-2013-0996 (itunes)
Sunday, May 19, 2013

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05.. .. read more..