Navya B Email & Phone Number

Having an experience around 4+ years in Web & Mobile applications, and Network Penetration testing.Thirt Modeling: Threat Modeling of web applications using STRIDE, DREAD, CVSS and Attack Tree techniques.Secure Architecture: Secure architecture and coding of web applications using threat modeling in conjunction with DAST (Dynamic Application Security Testing) Tools.DAST (Dynamic Application Security Testing): Performed Vulnerability Assessment for web applications, API and Network. Validating the target for all the vulnerabilities like XSS, SQL Injection etc.SAST (Static Application Security Testing): Performed source code scanning to the applications using enterprise automated tools.Network Security: Good knowledge on network security & Protocols like SSH, FTP, TELNET, HTTP, DNS, DHCP, SNMP, HTTPS, RDP, SMB, IMAP, POP3, RADIUS, DIAMETER, VOIP, SNMP, LDAP, NTP, NETBOISAnalysis of Cryptographic standards - Encryption, Hashing, Digital certificate for all the applications and suggesting the best standards based of the purpose of the application.Configuring web applications for dynamic scanning using any of the authentication methods like Basic authentication, Forms authentication etc.Analysis of Project requirement documents and functional specification documents

Penetration Testing on Internet facing application.Documenting the vulnerabilities and scanned results by performing Vulnerability assessment and Penetration Testing.Generating reports and sending for closure as per software compliance and security fixes as per latest threats and vulnerabilities.