Penetration Testing

Introduction

A penetration test one of the security assessments that perform on a computer system in which the person performing the assessment attempts to hack into the system. The main purpose is to find out whether or not person with malicious intent can enter the system, and what that person can access once the system has been penetrated. It offered by a number of security firms which specialize in the security of computer systems.

Then the Host Assessments is meaning to ensure systems are as up to date and as hard to compromise as possible.

Penetration Testing

Penetration testing is assesses the security model of the organization as whole it reveals potential of a real attacker breaking into the network. Penetration taster is the different from an attacker only by his intent and lack of meanness and is not completed professionally, and can result in the loss of services and disruption of business continuity.

The outsourcing of penetration testing services is divide into two which is driver of sourcing pentest services and underwriting penetration testing.

To do the penetration testing it must have engagement meaning that organization will allow penetration test against any of production systems after it agree upon clearly stated rules of engagement and it can specify the desired code of conduct the procedures to be followed and the nature of the interaction between the taster and organization.

When doing the penetration testing, pentest team can choice of doing the test either remotely or on –site, a remote assessment may simulate an external hacker attack .however it may miss assessing internal guards and on - site assessment may be expensive and may not simulate and external threat exactly .

The penetration testing can be conducted to way which is automated testing and manual testing. Automated testing can result in time, cost saving over a long term and the tools that use can have high leaning curve any may need frequents to be effective. Manual testing is the best option because organization can choose to benefit from the experience of security professional

Type of Penetration Testing

1. External Testing

External testing is involves analysis of publicly available information, network enumeration phase, and the behavior of security analyzed.

2. Internal Testing

Internal testing will be performed from a number of network access points, representing each logical and physical segment

- Black –hat testing /zero – knowledge testing

- Gray- hat testing /partial –knowledge testing

- White-hat testing /complete –knowledge testing