Penetration test or **Pen test is a test or attempt to assess the level of security mechanisms using a simulation of real situations that could be used by potential attacker. Its aim is to detect weak points (ie. Vulnerabilities) through the knowledge of different attacking techniques. The test is results from penetration testing to be carried out either by someone from our company or by external specialist that performs the test. Penetration test conducted by a specialist is always better because he knows more attacking techniques and can therefore reveal more weaknesses or vulnerabilities.
What can a penetration test to check?
- Unauthorized access somewhere
- Forced or violent entry somewhere
- Protection against attack
- Unavailability of service or removing something from operation
- Obtain confidential, or otherwise sensitive information důležotých
What kinds of penetration tests exist?
- Test of T Infrastructure (focused on infrastructure weaknesses)
- Penetration test of the software or applications (focused on software weaknesses)
- Test of the physical security (e.g. penetration into guarded property, building or grounds)
- Test of penetration into a device (eg. To a PC, phone, router, etc.)
- and many others
Jaribio la kupenya (Pen test) ni jaribio au jaribio la kutathmini kiwango cha usalama wa mfumo wa usalama kwa kutumia simulation ya hali halisi ambayo inaweza kutumika na mshambuliaji wa uwezekano. Lengo lake ni kugundua pointi dhaifu (yaani. Uharibifu) kupitia maarifa ya mbinu tofauti za kushambulia. Uchunguzi wa Uvumbuzi wa Kuingia (PET) unafanywa na mtu kutoka kwa kampuni yetu au mtaalamu wa nje anayefanya mtihani. Jaribio la kupenya lililofanywa na mtaalamu ni bora zaidi kwa sababu anajua mbinu zaidi za kushambulia na kwa hivyo anaweza kufunua udhaifu zaidi au udhaifu. Ni nini kinachoweza kuchunguzwa na mtihani wa kupenya? - Upatikanaji usioidhinishwa mahali fulani - Kuingia kwa nguvu au kwa vurugu mahali fulani - Ulinzi dhidi ya shambulio - Kutokuwepo kwa huduma au kuondoa kitu kutoka kwa operesheni - Kupata siri, au habari nyeti kwa njia nyingine důležotých Ni aina gani za vipimo vya kupenya zipo? T-Test ya Infrastructure (kuzingatia udhaifu wa miundombinu) - Jaribio la kupenya la programu au maombi (kuzingatia udhaifu wa programu) - Jaribio la usalama wa kimwili (kwa mfano Kuingia katika mali, jengo au ardhi inayolindwa - Mtihani wa kuingia katika kifaa (kwa mfano. (Kuhusu PC, simu, router, na vinginevyo) - na wengine wengi