Information security assessment service

Check, scan and evaluate information security for the following systems: Intelligent operating monitoring center (IOC) system (ioc.vinhlong.gov.vn); Open Data Portal opendata.vinhlong.gov.vn; Digital Popular Education Platform binhdanhocvuso.vinhlong.gov.vn; Provincial digital transformation rating and evaluation system (DTI) dti.vinhlong.gov.vn; Domain name resolution system; Background database system of the province hatang.vinhlong.gov.vn

1

Package

- Check and evaluate application security + Check for inappropriate information disclosure + Check configuration and deployment management + Check identity management + Check authentication + Hijacking and unauthorized upgrade errors + Check session management + Check the ability to validate input parameters + Check error handling capabilities + Check weak encryption mechanisms + Unauthorized downloading or execution of program code + Check for SQL Injection errors + Check execution of malicious script code Reflected Cross Site Scripting + Error handling test + Unexpected file types upload test + Client-side URL redirection test + Clickjacking test + Account information collection and user account guessing test + Account suspension and account reuse test + Default account and password test + Password policy test + CSRF test + Cookies attribute test + Code Injection error Xpath Injection error + Command Injection error + Error Execution of malicious script code on the Server (Stored Cross Site Scripting) Error using source code components with known vulnerabilities + DOM based Cross Site Scripting check - Check and evaluate server security + Passwords + Data backup and recovery policy + Data classification and encryption + Server room security and physical security issues. - Prepare reports on assessment results.

Vinh Long Love

Details according to the attached text