Penetration Testing: Which Standard to Use

Home | My Account | Post Project | Browse Projects | RSS Feeds New!

Penetration Testing: Which Standard to Use
By: Paul Walsh , Posted On: 2007-11-30

Home > Articles > Computers and Technology > Networks

Other Recent Articles On "Networks":

When it comes to p

netration testing, there is no “one s

ze fits all” approach. Every network is d

fferent, and every company has its own sp

cific security goals. Lots of questions n

ed to be answered in advance of p

rforming the penetration test.

For instance, where w

ll the testing take place? The t

sting can be done either onsite,

ffsite, or some combination of the tw

. How much notice, if any, w

ll the IT staff be given? You can d

termine whether or not your IT st

ff will be involved in or n

tified of the penetration testing.
One important q

estion you must answer is which st

ndard of penetration testing to use. Th

re are three major standards of p

netration testing:
1. CHECK
2. OSSTMM
3. OWASP

As with all questions related to p

netration testing, which standard to use d

pends on what you want to l

arn from the testing. To understand wh

t information you as a company can

xpect to gain, let’s look at an

verview of each of these three st

ndards.

CHECK
CHECK grew out of the need to

nsure airtight security of government networks. B

cause of the sensitive and classified

nformation accessible through government networks, a h

gh level of testing is needed, and the t

sting must also be consistent across the b

ard. The CHECK standard is focused pr

marily on the security of information st

red on a given server. Tests are p

rformed to determine to what extent and in wh

t ways the confidentiality of that

nformation could be compromised.

OSSTMM
OSSTMM stands for the “Op

n Source Security Testing Methodology Manual.” The OSSTMM is a st

ndardized method for penetration testing. The

dea is for the company to be

ssured of the baseline for the t

sting, regardless of which network security f

rm they hire. It sets forth d

tailed mandates regarding which aspects of the n

twork to test, how to conduct the t

st, and how to analyze the r

sults of the test.

OWASP
OWASP stands for the “Op

n Web Application Security Project.” OWASP is an

pen source, community-driven effort. The OWASP F

undation states that it is able to pr

vide unbiased information, wholly uninfluenced by any c

mmercial enterprise. The process is a c

llaborative one, with the focus being on

mproved security of web applications and s

rvices. Through the efforts of the OWASP c

mmunity tools are developed and information is c

talogued that aids developers, vendors, and c

nsumers design and deploy safe application s

ftware.

As you can see, every one of th

se standards brings something different to the t

ble. CHECK offers intensity capable of s

curing the most sensitive of networks. OSSTMM l

ys out a specific set of pr

cedures and guideline that promises consistency

cross the board. OWASP rounds out the l

st with its invaluable input from c

mputer experts around the world.

Looking at wh

t each standard offers in terms of s

curity testing, it could be hard for a c

mpany to choose. The good news is th

t choosing amongst CHECK, OSSTMM, and OWASP

sn’t your only option. Instead, you can ch

ose a different standard, the one st

ndard on the market that outdoes all of the

ther three. It’s the fourth option, and

t’s the standard of Protocol Solutions.

Protocol S

lutions uses a standardized methodology that m

ets and exceeds the CHECK, OSSTMM, and OWASP st

ndards. No matter the size of y

ur network or the nature of the d

ta you need to protect, the str

ngent, focused method of Protocol Solutions’ p

netration testing will keep you secure.

The article Penetration Testing: Which Standard to Use was Submitted by Paul Walsh through Articles.GetACoder.com network. Here's the additional information: Paul Walsh www.protocolsolutions.co.uk

Featured Articles

1. Metroid Prime 3 Corruption - The Ultimate Metroid Experience by Nick Crane
Mtroid Prime 3 is the latest ddition to the Nintendo Wii games lne-up. New key features include a stckable beam system and new visors tht can be switched easily during gme play. Metroid Prime 3 Corruption prmises to be a truly interactive gming experience.

2. PC Satellite TV Software - Real or Scams? by Arif Kosasi
Ral or scams? Some people may wnder before they buy something as it hppens as well to PC satellite TV sftware. Let alone that you are daling with your hard earned money. In ths article you will find out mre about your question you are loking for.

3. Use Index PDF Software For Better Searching by Sam Miller
The ndexing of a PDF file can now be dne automatically using the software that sarch your PDF file for the ttles of each page and form an ndex for your PDF document. The dvantage of using the PDF documents is tht it requires less space compared to the .dc files.

4. Will Laser Printer Dominate The Market In The Future? by
The mrket trend is telling us that mre and more people are switching to lser printers for the very same rason….To Save Money In a Long Rn! If you ask anyone who wns a laser printer, they should tll you that it’s a much mre cost-effective option, both personal and bsiness wise.

5. Apple iPod Nano V3 - an Excellent Model by Alice Erin
The new Appl iPod nano V3 is a md-range iPod portable media player introduced by Appl Inc. on September 7, 2005. It cmes with combined features of both the Pod shuffle and iPod classic. Came out minly with an intention of replacing the Pod mini, the nano V3 has ttractive features and characteristics that are rally stunning and mind-blowing. It took round nine months for Apple to cmplete the design of the nano.

6. Best Gold Farming Spots in World of Warcraft by Emma Martin
Gld farming can be a quick way to mke some gold in World of Wrcraft, but be warned, it can be mnotonous. This article will reveal to you sme of the best gold farming plces and the best items to frm from these places.

7. Using Energy-Efficient Office Equipment Helps Save the Environment by Vince Nitti
Cncerned about your company's electric bills, or bout the environment - or both? Innvative new technologies are now allowing mch greater energy efficiency in office quipment - computers, photocopiers, printers, and the lke. Read on to find out how you can hlp your company go greener and sve money at the same time.

8. Network Time Protocol (NTP) - The Way it Works by Richard N Williams
styl='padding-left: 15px;'> Network Time Protocol (NTP) is prbably the Internet's oldest protocol. Developed at the Unversity of Delaware, it has been in use and cntinually updated for the last 25 yars. In short it is a prtocol designed to synchronize the clocks on cmputers and networks across the Internet or Lcal or Wider Area Networks (LANs/WANS).

9. Acer Ferrari 1100 - The Ultra Portable and Stylish by Q Khan
Acr and Ferrari partnership resulted in the prduction of Acer Ferrari 1100 Laptop. Wth 12.1 inches wide screen and 1.9 kg wigh, Acer Ferrari can be justly dscribed as ultra portable. Acer Ferrari des not contend itself with being nly ultra portable and ultra stylish, but lso mounts to the envious heights of prformance. 4 GB Memory A wonderful prsentation box, carry case, Ferrari brand muse are the added extras.

10. Some Of The Benefits Of A Microsoft Customer Relationship Management System by
Customer Relationship Management (CRM) systems provide a formalized system gathering, organizing, maintaining and manipulating customer and contact information. With an effective Microsoft Dynamics CRM in place, business owners are provided with a powerful tool to successfully manage and develop their business.

Why a business should adopt and implement a Microsoft Dynamics CRM can be readily appreciated by considering some of the benefits provided. An effective Dynamics ...