TU Darmstadt / ULB / TUbiblio

Testing Production Systems Safely: Common Precautions in Penetration Testing

Türpe, Sven and Eichler, Jörn (2009):
Testing Production Systems Safely: Common Precautions in Penetration Testing.
In: 4th Testing: Academic and Industrial Conference (TAIC PART 2009), [Conference or Workshop Item]

Abstract

Unlike testing in a laboratory or test bed situation, the testing of production systems requires precautions to avoid side effects that might damage or disturb the system, its environment, or its users. This paper outlines safety precautions to be taken when testing production systems. Specifically we discuss precautions for penetration testing aiming at identifying security vulnerabilities. We generalize and document experience we gained as penetration testers, describing how the risks of testing can be mitigated through selection of test cases and techniques, partial isolation of subsystems and organizational measures. Though some of the precautions are specific to security testing, our experience might be helpful to anyone testing production systems.

Item Type: Conference or Workshop Item
Erschienen: 2009
Creators: Türpe, Sven and Eichler, Jörn
Title: Testing Production Systems Safely: Common Precautions in Penetration Testing
Language: German
Abstract:

Unlike testing in a laboratory or test bed situation, the testing of production systems requires precautions to avoid side effects that might damage or disturb the system, its environment, or its users. This paper outlines safety precautions to be taken when testing production systems. Specifically we discuss precautions for penetration testing aiming at identifying security vulnerabilities. We generalize and document experience we gained as penetration testers, describing how the risks of testing can be mitigated through selection of test cases and techniques, partial isolation of subsystems and organizational measures. Though some of the precautions are specific to security testing, our experience might be helpful to anyone testing production systems.

Title of Book: 4th Testing: Academic and Industrial Conference (TAIC PART 2009)
Uncontrolled Keywords: Secure Services
Divisions: LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
LOEWE > LOEWE-Zentren
LOEWE
Date Deposited: 30 Dec 2016 20:23
Identification Number: TUD-CS-2009-0069
Export:
Suche nach Titel in: TUfind oder in Google
Send an inquiry Send an inquiry

Options (only for editors)

View Item View Item