Cyber Security Attack & Defense

- Improve chances of successfully completing penetration testing method

–Initiating (gain approval for project, let client know whats included/excluded, identify stakeholders)
–Planning (duration of project, size of team, cost of project, resources needed)
–Executing (attacks are conducted)
–Closing (final documents released to client, contractual agreement concluded, closing process)
–Monitoring and Controlling (watch out for changes that need to be managed)

As penetration testing is a project itself, the standardized project management practices of PMBOK are of great help when performing pen testing.

Phase 1: Planning & Preperation (exchange information, plan and prepare for the test)

Phase 2: Apply layers to the following targets: Networks, Hosts, Applications, Databases.

Phase 3: Generating reports and securing data that was obtained during the test.

•Advantages
–Does not assume previous knowledge.
–Provides examples of penetration test tool use.

•Disadvantages
–Out of date quickly.
–Penetration test tool examples are not extensive.
–Last update: May 2006

Blind: Analyst no knowlede of defenses, assets or channels. Target is prepared.

Double Blind: Analyst no knowledge of defenses, assets or channels. Target is not notified in advance.

Grey Box: Analyst limited knowledge of defenses and assets, full knowledge of channels. Target is prepared

Double Grey Box: Analyst limited knowledge of defenses and assets, full knowledge of channels. Target is notified about scope and time frame, but not channels and vectors.

Tandem: Analyst and Target both prepaired knowing all the details.

Reversal: Analyst full knowledge. Target no knowledge.

False Positive:

Taret response indicates state as true, but in reality is not true.

False Negative:

Target response indicates state as no true, but in reality is true.

Gray Positive:

Target response indicates state as true, however target is designed to always respond with this state.

Gray Negative:

Target response indicates state as not true, however target is designed to always respond with this state.

Specter:

Target response indicates state as true or not true, but in reality it cannot be known.

Indiscretion:

Target response indicates state as true or false but only during particular time.

Entropy Error:

Target response cannot indicate state as true or false due to a high noise to signal ratio.

Falsification:

Target response indicates state as either true or false although in reality it is dependent on largely unknown variables.

•Advantages
–More flexibility for Pentesters.
–Frequent updates.
•Disadvantages
–Assumes tester have necessary knowledge beforehand.
–Latest version requires paid subscription.