The reports in this appendix will give you a good idea of what security testers do and how they

Size: px

Start display at page:

Download "The reports in this appendix will give you a good idea of what security testers do and how they"

Marsha Nicholson
8 years ago
Views:

1 DOCUMENTATION FORMS FOR PENETRATION TESTS The reports in this appendix will give you a good idea of what security testers do and how they should present findings to managers and IT personnel. The sample reports show how methodical a security tester must be and emphasize that nothing should be overlooked or assumed to be unimportant. Security testers must consider all factors that might affect the security of a business. The two reports in this appendix are sample documents shared by ISECOM. Few organizations give examples of documentation for a security test, so these reports will be extremely helpful. Some material in the reports might be beyond the scope of information covered in this book,but remember that you can delve into any areas in which you aren t well versed. The first sample report is an executive summary usually given to management staff, who typically aren t interested in all the details of a security test. Instead, they want a summary of important areas that they can read over quickly to get the bottom line. For these people, you need to emphasize what problems were found and how they can be fixed. The second sample is the technical report that would most likely be given to IT personnel. This type of report includes details of vulnerabilities and exploits as well as possible solutions for the identified problems. Clients who hire security professionals to assess their organizations want a report that details what was found and offers recommendations to help protect their resources. Documentation the task most IT professionals hate is probably the most important part of a security professional s job. When a team is used to conduct a security test, the person most skilled in report writing should handle creating these reports to management and IT staff. 1

Security testers must consider all factors that might affect the security of a business. The two reports in this appendix are sample documents shared by ISECOM.

2 2 Documentation Forms for Penetration Tests

3 Documentation Forms for Penetration Tests 3 C

4 4 Documentation Forms for Penetration Tests

5 Documentation Forms for Penetration Tests 5 C

6 6 Documentation Forms for Penetration Tests

7 Documentation Forms for Penetration Tests 7 C

8 8 Documentation Forms for Penetration Tests

9 Documentation Forms for Penetration Tests 9 C

10 10 Documentation Forms for Penetration Tests

11 Documentation Forms for Penetration Tests 11 C

12 12 Documentation Forms for Penetration Tests

13 Documentation Forms for Penetration Tests 13 C

14 14 Documentation Forms for Penetration Tests

15 Documentation Forms for Penetration Tests 15 C

16 16 Documentation Forms for Penetration Tests

17 Documentation Forms for Penetration Tests 17 C

18 18 Documentation Forms for Penetration Tests

19 Documentation Forms for Penetration Tests 19 C

20 20 Documentation Forms for Penetration Tests

21 Documentation Forms for Penetration Tests 21 C

22 22 Documentation Forms for Penetration Tests

23 Documentation Forms for Penetration Tests 23 C

24 24 Documentation Forms for Penetration Tests

25 Documentation Forms for Penetration Tests 25 C

26 26 Documentation Forms for Penetration Tests

27 Documentation Forms for Penetration Tests 27 C

28 28 Documentation Forms for Penetration Tests

29 Documentation Forms for Penetration Tests 29 C

30 30 Documentation Forms for Penetration Tests

31 Documentation Forms for Penetration Tests 31 C

32 32 Documentation Forms for Penetration Tests

33 Documentation Forms for Penetration Tests 33 C

34 34 Documentation Forms for Penetration Tests

35 Documentation Forms for Penetration Tests 35 C

36 36 Documentation Forms for Penetration Tests

37 Documentation Forms for Penetration Tests 37 C

38 38 Documentation Forms for Penetration Tests

39 Documentation Forms for Penetration Tests 39 C

40 40 Documentation Forms for Penetration Tests

41 Documentation Forms for Penetration Tests 41 C

42 42 Documentation Forms for Penetration Tests

43 Documentation Forms for Penetration Tests 43 C

44 44 Documentation Forms for Penetration Tests

45 Documentation Forms for Penetration Tests 45 C

46 46 Documentation Forms for Penetration Tests

47 Documentation Forms for Penetration Tests 47 C

48 48 Documentation Forms for Penetration Tests

49 Documentation Forms for Penetration Tests 49 C

50 50 Documentation Forms for Penetration Tests

51 Documentation Forms for Penetration Tests 51 C

52 52 Documentation Forms for Penetration Tests

53 Documentation Forms for Penetration Tests 53 C

54 54 Documentation Forms for Penetration Tests

55 Documentation Forms for Penetration Tests 55 C

56 56 Documentation Forms for Penetration Tests

57 Documentation Forms for Penetration Tests 57 C

58 58 Documentation Forms for Penetration Tests

59 Documentation Forms for Penetration Tests 59 C

60 60 Documentation Forms for Penetration Tests

Hands-On Ethical Hacking and Network Defense - Second Edition Chapter 1. After reading this chapter and completing the exercises, you will be able to:

Hands-On Ethical Hacking and Network Defense - Second Edition Chapter 1. After reading this chapter and completing the exercises, you will be able to: Objectives After reading this chapter and completing the exercises, you will be able to: Describe the role of an ethical hacker Describe what you can do legally as an ethical hacker Describe what you can