ISAAF-PENETRATION TESTING FRAMEWORK

From OISSG

1. EXECUTIVE SUMMARY

A) PENETRATION_TESTING_METHODOLOGY

B) PENETRATION TESTING METHODOLOGY, PHASE-II EXPLAINED

C) HANDLING_FALSE_DETECTION_RATES

-- Network Security --

D) PASSWORD SECURITY TESTING

E) SWITCH SECURITY ASSESSMENT

F) ROUTER SECURITY ASSESSMENT

G) FIREWALL SECURITY ASSESSMENT

H) INTRUSION DETECTION SYSTEM SECURITY ASSESSMENT

I) VPN SECURITY ASSESSMENT

J) ANTI-VIRUS SYSTEM SECURITY ASSESSMENT AND MANAGEMENT STRATEGY

K) STORAGE AREA NETWORK (SAN) SECURITY

L) WLAN SECURITY ASSESSMENT

M) INTERNET USER SECURITY

N) AS 400 SECURITY

O) LOTUS NOTES SECURITY

-- Host Security --

P) UNIX /LINUX SYSTEM SECURITY ASSESSMENT

Q) WINDOWS SYSTEM SECURITY ASSESSMENT

R) NOVELL NETWARE SECURITY ASSESSMENT

S) WEB SERVER SECURITY ASSESSMENT

-- Application Security --

T) WEB APPLICATION SECURITY ASSESSMENT

U) WEB APPLICATION SECURITY ASSESSMENT (CONTINUE…) – SQL INJECTIONS

V) SOURCE CODE AUDITING

W) BINARY AUDITING

X) APPLICATION SECURITY EVALUATION CHECKLIST

-- Database Security --

Y) DATABASE SECURITY ASSESSMENT

2. SOCIAL ENGINEERING

ANNEXURE - KNOWLEDGE BASE

3. PENETRATION TESTING LAB

4. HANDLING FALSE DETECTION RATES

5. TEAM

6. FEEDBACK FORM