VAPT for ESG & Ventilator

Scope

• Vulnerability Assessment

  Penetration Testing

Inputs

• Security requirements

  FDA

  NIST SP 800-115

  Source code for SAST

  Binaries(firmware) for third-party analysis

  Architecture design

  Schematics of hardware

  TARA

Objectives

• Application security Assessment

  Hardware security Assessment

  Firmware Reverse engineering

  Static code analysis (white box)

  Communication Security

  Real-Time Operating System (RTOS) Testing

  Data Integrity and Availability

Deliverables

• Execution plan

  VAPT report

Tools and frameworks Used

• Metasploit framework

  Ghidra for software reverse engineering

  Volatility

  Black Duck

  Burp suite

  Dependency Track

  x64dbg

  JTAGulator

  Ubertooth

  Fortify