PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pentesting in Depth - Đánh giá an toàn thông tin nhiều lớp

blog.viettelcybersecurity.com | blog | #pentesting | #methodology | #security-assessment | #blackbox | #whitebox | #graybox
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Arguing that a pentest alone cannot guarantee security, this article proposes 'Pentesting in Depth' and compares blackbox, whitebox, and graybox approaches for assessing systems in layers.
Published
Collected

Related coverage

blog · bishopfox.com
Adversarial Controls Testing: A Step to Cybersecurity Resilience
Bishop Fox introduces Adversarial Controls Testing: instead of reviewing configs, ACT simulates MITRE ATT&CK-mapped TTPs to measure whether email, endpoint and network controls detect and respond.
blog · blog.trailofbits.com
Can you pass the Rekt test?
Trail of Bits CEO Dan Guido and a Web3 security working group created the Rekt Test, simple yes-or-no questions modeled on the Joel Test that help blockchain teams assess their security posture.
blog · bishopfox.com
If Your Scope Is Bad, Your Pen Test Will Be Bad
Why pen test quality hinges on scoping: assessment teams have limited time and legal limits attackers don't, so sharing goals and context up front maximizes the value you get.
blog · bishopfox.com
Preparing for the Google Partner Program Security Test
A self-assessment questionnaire for the Google Partner Program security test: incident response, MFA, token storage, encryption, and the five flaws most common in last year's assessments.
blog · bishopfox.com
Defining the Scope of Your Pen Test
A walkthrough of penetration test planning: how scoping decisions define targets, boundaries and depth, using a CRM application example to illustrate risk-based prioritization.
blog · bishopfox.com
What Makes a Good Penetration Test?
Jake Miller offers criteria for judging penetration test quality: clear, reproducible deliverables, strategic recommendations, tailored remediation guidance and responsive consultants.
Back