This might help:
"Red team-blue team exercises take their name from their military antecedents. The idea is simple: One group of security pros--a red team--attacks something, and an opposing group--the blue team--defends it. Originally, the exercises were used by the military to test force-readiness."
http://www.sans.org/critical-security-controls/control.php?id=17And here's a good explanation by the infamous Grendel
http://www.elsevierdirect.com/Phishwrap/Pen_Testing_and_Red_Team_by_Tom_Wilhilm.html"The concept of a "Red Team " attack from a military perspective is to imitate potential threats and use the same vectors that the adversary would use during an attack. The problem with this terminology used in information security is that a Red Team project somehow tries to separate itself from the general concept of a "penetration test; " as if a Red Team assessment is somehow more than a pen test – more intensive, more advanced, or perhaps more effective in identifying and exploiting vulnerabilities within an organization’s network. To separate Red Team from the term "penetration testing, " proponents of the term "Red Team " distinguish Red Team efforts by restricting penetration testing to vulnerability verification without the ensuing enumeration component (or at least minimal enumeration). Opponents to the term believe that Red Team activities are already a subcomponent of penetration testing, and the attempt to separate Red Team from pen testing is simply a marketing ploy."