The Ethical Hacker Network - Security Testing Strategy..

Latest Additions

Who's Online

EH-Net > Resources > Tutorials (Moderator: don) > Security Testing Strategy..

Pages: [1] Go Down

	Author	Topic: Security Testing Strategy.. (Read 6529 times)
0 Members and 1 Guest are viewing this topic.

sharabhs

Newbie

Offline

Posts: 20

« on: July 24, 2009, 04:45:14 AM »

Hi All,

I am looking for "Security Test Strategy" guideline document.

Can anyone help me in this regards.

Thanks,
Sharabh Sharma


	Logged

Andrew Waite

Hero Member

Offline

Posts: 928

« Reply #1 on: July 24, 2009, 04:54:32 AM »

Sharabhs,

what aspect of security testing are you looking for: Is it purely a pentest process, or a wider organisational security strategy?


	Logged

Equix3n-

Sr. Member

Offline

Posts: 386

« Reply #2 on: July 24, 2009, 05:09:58 AM »

Hello Sharabh,
You may want to take a look a the NIST Computer Security Incident Handling Guide.
http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf


	Logged

Salvalagio

Newbie

Offline

Posts: 4

« Reply #3 on: July 25, 2009, 05:41:06 PM »

Hello Sharabh,

If I really understand your question, you are searching for papers to guide you in aspects of what steps should be taken to really know your security environment, your deficiencies and security posture.

Take a look into this:
http://www.sans.org/reading_room/whitepapers/testing/guidelines_for_developing_penetration_rules_of_behavior_259

Regards