Penetration Test - Planning and Scoping(2)

2021-01-18 21:17

阅读：659

标签：Plan man off stand osi rms hat exec ora

Know your target audience
- Who is sponsoring the pen test?
- What is the purpose of the test?
Rules of engagement - governs the pen tester‘s activities
- Schedule - start, stop, temporal restrictions
- Team composition, location, access
Test scope
- Technical/physical/personnel
- Target limits (inclusion, invasiveness, etc.)

Risks of pen testing
- Crashing devices, services, whole servers
- Corrupting data
- Degrading performance
- Terms of Service(TOS)/regulation/legislation violation
Communication escalation path
- Who to contact if thins go wrong
- Communication expectations(content, trigger, frequency)

Penetration Test - Planning and Scoping(2)

标签：Plan man off stand osi rms hat exec ora

原文地址：https://www.cnblogs.com/keepmoving1113/p/13341306.html

文章来自：搜素材网的编程语言模块，转载请注明文章出处。
文章标题：Penetration Test - Planning and Scoping(2)
文章链接：http://soscw.com/index.php/essay/43821.html

亲，登录后才可以留言！