Penetrationtechniques.edited.docx

Running Head: PENETRATION TECHNIQUES 1

PENETRATION TECHNIQUES 4

Penetration techniques

Professor’s name:

Student’s name:

Date

The aspect of penetration testing designing is undertaken with the fundamental aspect of establishing vulnerabilities based on a network. Thus, this can be described as a pen test which is established as being similar to vulnerability assessment with the fundamental distinction being the fact that pen test enhances the presentation of exact simulation subject to potential attacks subject to vulnerabilities identification established as complicated with regards to being located and established subject to a network. The widely employed network penetration includes wireless networks, social engineering, physical testing, web application security tests, and network penetration testing and exploitation. Various techniques applied include wireless testing, information gathering, identification of vulnerability, network mapping alongside the web application techniques with subject to the aspect of penetration testing (EC-Council, 2010).

The primary objects with regards to undertaking network penetration testing are attempting the breakage of a security system. Hence, the most significant advantage attributed to network penetration testing can be established to monitor and improve information security programs. The advantage of network mapping is attributed to easy inventory tracking, myriad association with other applications, and host uptime and downtime monitoring. The disadvantage associated with network mapping is it's highly prone to vulnerabilities. The advantage of vulnerability identification technique is that it promotes vulnerability identification chances before identification by cybercriminals; the benefits, on the other hand, entail false positives; thus, individuals don't end up establishing every other vulnerability. The advantage of information gathering is that it enhances the provision of useful data without being subjected to reviews, while consequently, it has drawbacks associated with data collection. The advantage of wireless testing is the fact that it entails convenience subject to network testing though it is subject to lack of mobility and high-cost implications (Allsopp, 2017).

On and off-site social engineering techniques with regards to the aspect of social engineering are established, being among the most notable aspects of social engineering. Thus, the probable positive implications include high-risk weakness identification resulting from a combination of smaller vulnerabilities, identification of various vulnerabilities, and the provision of specified recommendations. On the other hand, the negative implications entail great damage attributed to penetration testing subject to being conducted inappropriately, trust requirement subject to the penetration tester, and misleading results subject to the application of realistic test conditions (EC-Council, 2010).

References

Allsopp, W. (2017). Advanced penetration testing: Hacking the world's most secure networks. John Wiley & Sons.

EC-Council. (2010). Penetration testing: Network threat testing. Cengage Learning.

EC-Council. (2010). Penetration testing: Procedures & methodologies. Cengage Learning.