TU Darmstadt / ULB / TUbiblio

Testing Production Systems Safely: Common Precautions in Penetration Testing

Türpe, Sven ; Eichler, Jörn (2009)
Testing Production Systems Safely: Common Precautions in Penetration Testing.
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Unlike testing in a laboratory or test bed situation, the testing of production systems requires precautions to avoid side effects that might damage or disturb the system, its environment, or its users. This paper outlines safety precautions to be taken when testing production systems. Specifically we discuss precautions for penetration testing aiming at identifying security vulnerabilities. We generalize and document experience we gained as penetration testers, describing how the risks of testing can be mitigated through selection of test cases and techniques, partial isolation of subsystems and organizational measures. Though some of the precautions are specific to security testing, our experience might be helpful to anyone testing production systems.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2009
Autor(en): Türpe, Sven ; Eichler, Jörn
Art des Eintrags: Bibliographie
Titel: Testing Production Systems Safely: Common Precautions in Penetration Testing
Sprache: Deutsch
Publikationsjahr: 2009
Buchtitel: 4th Testing: Academic and Industrial Conference (TAIC PART 2009)
Kurzbeschreibung (Abstract):

Unlike testing in a laboratory or test bed situation, the testing of production systems requires precautions to avoid side effects that might damage or disturb the system, its environment, or its users. This paper outlines safety precautions to be taken when testing production systems. Specifically we discuss precautions for penetration testing aiming at identifying security vulnerabilities. We generalize and document experience we gained as penetration testers, describing how the risks of testing can be mitigated through selection of test cases and techniques, partial isolation of subsystems and organizational measures. Though some of the precautions are specific to security testing, our experience might be helpful to anyone testing production systems.

Freie Schlagworte: Secure Services
ID-Nummer: TUD-CS-2009-0069
Fachbereich(e)/-gebiet(e): LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
LOEWE > LOEWE-Zentren
LOEWE
Hinterlegungsdatum: 30 Dez 2016 20:23
Letzte Änderung: 17 Mai 2018 13:02
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen