Checking the security of "UZ" national sites
Website audits are performed to identify cyber security vulnerabilities and threats on websites and to eliminate them in a timely manner.
Website information security is implemented in several stages:
The website examination is carried out by experts (experts) of the Center on the basis of a contract drawn up in accordance with the established procedure based on a written request of the website owner or an electronic application filled out on the official website of the Cyber Security Center (hereinafter – the Center).
One or two specialists are involved in the research process, depending on the volume of work and the period of their implementation. It should be taken into account that it takes an average of 20-30 working days to check 1 website. Period of examination
and the procedure should be specified in the contract.
Taking a backup (backup), placing on a test site, analyzing the website
Check the website for viruses
Automatic search for vulnerabilities
Check for vulnerabilities found
Search for vulnerabilities in the source code
Search for vulnerabilities in the content management system
(CMS) core
Manual search for vulnerabilities and exposure of confidential information