Home Page

PTA Solutions for Security Consultants and Service Providers

PTA technology is comprised of a unique data model and a set of well defined calculative methods. PTA enables you to assess risk levels and provides quantitative prioritized countermeasures. The software infrastructure was designed in a modular way that easily enables customizing it's various elements. PTA technology can be integrated with other security products and services to provide superior security management solutions.

Cooperation with Partners

PTA Technologies is actively pursuing cooperation with security consultants firms and security services providers as follows:

1. PTA Qualified Partner Program for security consulting and security services firms. The free program enables security consulting companies to use PTA Professional Edition platform in their risk analysis missions and add value to their service proposition. Contact Marina for more details on how to join the PTA Qualified Partner Program.

2. OEM, Tailored Systems, Custom Security Libraries and Custom Reports - for those companies seeking to offer threat analysis systems tailored to their clients’ needs, we offer personalized, private professional development programs. Each system can be custom designed for your technology and/or professional services’ needs. For more information please contact Zeev Solomonik.

3. Professional Development Services for customizing PTA technology according to large scale enterprise needs. PTA Technologies is a division of Eldan Software Systems Ltd. Our team has wide experience in software design and development and in accompanying our customers in creating unmatched systems with outstanding quality. For more information on our professional development services, please contact Gabi Laebel.

Integrating PTA Technology with Security Solutions

The PTA software technology infrastructure is comprised of the following modules:

Quantitative threat model database. The scheme of the database can be easily customized to include additional entity types. For example audit and monitoring steps, topology layouts, operative parameters etc. There is no limit to the number of entities and interrelations between them in the model.
Data input interfaces. Enables automatic input of entities data and parameters from a variety of external sources e.g. vulnerability scanners, real-time security analyzers, network appliances etc.
PTA calculative engine. The calculative methods can be easily adapted to a variety of application domains. For example the financial values of assets can be expressed according to localized formulas, the severity of threats can have mnemonic descriptions etc.
Entity libraries. The technology plug-in data repositories enable preparation of security entities check lists that comply with information security standards such as ISO 17799, BS 7799, ISO 27001 and PCI DSS. Security equipment manufacturers and security services and solutions providers can build relevant subsets of vulnerabilities, threats, countermeasures and assets that best suit their security management conventions.
User interface layer. Can be customized and adapted to specific needs.

Reporting subsystem. Provides maximal flexibility in customizing reports and allows almost any type of cross-section tabular queries, analysis, display views and graphs.
Lightweight installation. Facilitate distribution, deployment and repackaging with existing products.

***

Practical Threat Analysis Real Life Case Studies
Home Page