Copy of IT Consulting Toolkit by Slidesgo (5).pptx

PPTX Presentation of final years project that consist of developing a security that assess the security of organization

1. Ministry of Higher Education and Scientific Research University of Tunis El Manar Higher Institute of Computer Sciences Development of an OSINT platform Presented by : Ben Lazreg Yassine Supervised by: Academic: Ms. Mr a bet Wiem Professional: Mr. Ben Ammar Hamza ‹#›

2. Table Of Contents Guardiance .io Introduction 1 Problematic & proposed solution 2 Needs analysis 3 System design 4 Implementation 5 Conclusion and perspectives 6 ‹#›

3. INTRODUCTION 01 ‹#›

4. Open-Source Intelligence (OSINT) is defined as intelligence produced by collecting, evaluating and analyzing publicly available information with the purpose of answering a specific intelligence question. What is OSINT ? ‹#›

5. HOST COMPANY About Teligencia Teligencia’s activities ‹#›

6. TELIGENCIA Founded in 2020, Düsseldorf, Germany. Cybersecurity consulting for European enterprises which is spectialized in Penetration Testing, audits and CISOaaS. ‹#›

7. CISO-As-A-Service (CISOaaS) Penetration Testing Audit & standards TELIGENCIA ACTIVITIES ‹#›

8. Problematic & proposed Solution 02 ‹#›

9. The digital revolution is driving many companies to digitalize their services, increasing their vulnerability to cyberattacks. Protecting sensitive information and maintaining data integrity is crucial but often inaccessible to small and medium-sized companies. Many organizations lack the tools and expertise needed to effectively secure their digital presence. This gap leaves them susceptible to data breaches, phishing, and other social engineering attacks, causing significant financial and reputational damage. PROBLEMATIC ‹#›

10. Existing solutions Maltego IntelTechniques TheHarvester Guardiance.io Automated Data Collection User-Friendly dashboard and reports ‹#›

11. PROPOSED SOLUTION: Guardiance.io User-friendly interface designed for non technical users. Request penetration testing to evaluate company security of automated scanners aren't enough. Advanced Monitoring and Testing Easy-to-Read Dashboard Gather comprehensive OSINT data with just a website URL and some customer details. Automated Data Collection ‹#›

12. Needs analysis 03 ‹#›

13. Functional requirements Registration and Login Allow customers, admins, and support engineers to securely sign up and authenticate using mandatory 2FA. Automated Data Collection Automatically gather comprehensive OSINT data from various online sources using APIs with minimal input. Report Generation and Insights Generate detailed cybersecurity reports and actionable insights using AI to assess the company's security posture. Dashboard and Navigation Offer the customer, admin, and support dashboards that will allow them to conduct monitoring, manage data, and access relevant features efficiently. ‹#›

14. Non- Functional requirements Security The system should adhere to industry-standard security practices. Scalability This project manages numerous API calls and an important amount of data. It also needs to be able to integrate new features by adding new APIs easily. Usability The user interface should be intuitive and easy to navigate. Reliability Being trustworthy and consistent in delivering outcomes to the clients in cybersecurity is one the most important criteria to adhere to in this project. ‹#›

15. SYSTEM DESIGN 04 ‹#›

16. GENERAL USE CASE DIAGRAM ‹#›

17. GENERAL CLASS DIAGRAM ‹#›

18. IMPLEMENTATION 04 ‹#›

19. ‹#›

20. SPRINTS SPRINT 1 SPRINT 2 SPRINT 3 SPRINT 4 Login Register Email-verification Two-Factor-Authentication Password reset Automatic customer details retrieval Automatic retrieval of company’s details Automatic retrieval of employee’s leaked emails Automatic retrieval of company’s website technologies and vulnerabilities Ability to request an active scan from the customer Upload of results by the support engineer Create a flask API for report generation Implement Chat GPT to summarize results Manage customer API quota consumption. Eliminate unnecessary API quota consumption Admin functionality to monitor API usage, manage user accounts, and edit customer information and restrict customer use. ‹#›

21. Software environment FRONT-END next.js BACK-END Laravel Flask For this project we’ve decided to go with Material UI TOOLS Gitlab Docker MySQL ‹#›

22. Demo of Guardiance.io ‹#›

23. Conclusion & perspectives 05 ‹#›

24. Made substantial contributions to Teligencia's codebase . Leveraged OSINT data to help companies monitor their online presence and prevent future breaches. Gained valuable insights into how vulnerable companies can be from simple phone or email leaks. CONCLUSION ‹#›

25. PERSPECTIVES Future Enhancements Develop our proprietary API’s to get better specific results from automated scanners. Enhance report generation done by our Flask API to feature better and more accurate data. UI/UX improvement for a better and more seamless experience eliminate the need for manual work done by the support engineer. ‹#›