penetration testing

Testing used in vulnerability analysis for vulnerability assessment, trying to reveal vulnerabilities of the system based on the information about the system gathered during the relevant evaluation activities.

Український переклад ще не підготовлено.

NIST SP 800-160v1r1

A method of testing where testers target individual binary components or the application as a whole to determine whether intra or intercomponent vulnerabilities can be exploited to compromise the application, its data, or its environment resources.

Український переклад ще не підготовлено.

NIST SP 800-95

A test methodology in which assessors, typically working under specific constraints, attempt to circumvent or defeat the security features of a system.

Український переклад ще не підготовлено.

NIST SP 800-12 Rev. 1

A test methodology in which assessors, typically working under specific constraints, attempt to circumvent or defeat the security features of a system.

Український переклад ще не підготовлено.

NIST SP 800-53 Rev. 5

A test methodology in which assessors, typically working under specific constraints, attempt to circumvent or defeat the security features of a system.

Український переклад ще не підготовлено.

NIST SP 800-53A Rev. 5

A test methodology in which assessors, typically working under specific constraints, attempt to circumvent or defeat the security features of an information system.

Український переклад ще не підготовлено.

CNSSI 4009-2015

A test methodology in which assessors, typically working under specific constraints, attempt to circumvent or defeat the security features of an information system.

Український переклад ще не підготовлено.

NIST SP 800-53 Rev. 4

A test methodology in which assessors, using all available documentation (e.g., system design, source code, manuals) and working under specific constraints, attempt to circumvent the security features of an information system.

Український переклад ще не підготовлено.

NIST SP 800-137

A test methodology in which assessors, using all available documentation (e.g., system design, source code, manuals) and working under specific constraints, attempt to circumvent the security features of an information system.

Український переклад ще не підготовлено.

NIST SP 800-53A Rev. 4

Security testing in which evaluators mimic real-world attacks in an attempt to identify ways to circumvent the security features of an application, system, or network. Penetration testing often involves issuing real attacks on real systems and data, using the same tools and techniques used by actual attackers. Most penetration tests involve looking for combinations of vulnerabilities on a single system or multiple systems that can be used to gain more access than could be achieved through a single vulnerability.

Український переклад ще не підготовлено.

NIST SP 800-115

Testing that verifies the extent to which a system, device or process resists active attempts to compromise its security.

Український переклад ще не підготовлено.

NIST SP 800-152

A test methodology intended to circumvent the security function of a system. Note: Penetration testing may leverage system documentation (e.g., system design, source code, manuals) and is conducted within specific constraints. Some penetration test methods use brute force techniques.

Український переклад ще не підготовлено.

NIST SP 800-160 Vol. 1

A test methodology intended to circumvent the security function of a system. Note: Penetration testing may leverage system documentation (e.g., system design, source code, manuals) and is conducted within specific constraints. Some penetration test methods use brute force techniques.

Український переклад ще не підготовлено.

NIST SP 800-160 Vol. 1

An evaluation methodology whereby assessors search for vulnerabilities and attempt to circumvent the security features of a network and/or information system.

Методологія оцінки, за допомогою якої оцінювачі шукають вразливі місця і намагаються обійти функції безпеки мережі та/або інформаційної системи.

CISA NICCS Glossary

An authorised test of a computer network or system, designed to look for security weaknesses with the end aim of fixing them.

Авторизований тест комп'ютерної мережі або системи, призначений для пошуку слабких місць безпеки з кінцевою метою їх усунення.

NCSC Glossary