Are You Hackable?
Penetration tests (also called “pen testing”) are a practice to test a computer system, network, or web application to find vulnerabilities that an attacker could exploit.
Penetration tests can be automated with software applications, or they can be performed manually. Either way, the process includes gathering information about the target before the test (reconnaissance), identifying possible entry points, attempting to break in (either virtually or in a real way), and reporting the results.
The main objective of penetration tests is to determine security weaknesses. A penetration test can also be used to test an organization's security policy compliance, its employees' security awareness, and the organization's ability to identify and respond to security incidents.
Penetration tests are sometimes called “white hat attacks” because in this type of test, the good guys are trying to break in.
Penetration testing strategies are:
Targeted testing
These selective tests are carried out jointly by the organization's IT team and the penetration testing team. It is sometimes called a “lights on” approach because anyone can see the test being conducted.
External testing
This type of penetration test targets the company's externally visible servers or devices, including domain name servers (DNS), email servers, web servers, or firewalls. The goal is to find out if an external attacker can get in and how far they can go once they have gained access.
Internal testing
This test simulates an internal attack behind the firewall by an authorized user with standard access privileges. This type of test is useful for estimating the amount of damage a disgruntled employee could cause.
Blind testing
A blind testing strategy simulates the actions and procedures of a real attacker, severely limiting the information given in advance to the person or team performing the test. Typically, they may only be given the company name. Because this type of test can require a considerable amount of time for reconnaissance, it can be expensive.
Double-blind testing
Double-blind testing takes blind testing one step further. In this type of penetration test, only one or two people in the organization may be aware that a test is being conducted. Double-blind tests can be useful for testing the organization's security monitoring and incident identification, as well as its response procedures.
