The Ethical Hack: A Framework for Business Value Penetration Testing
James S. Tiller · Thammasat University Digital Collections · 2004
INTRODUCTIONPerspectives of ValueSECURITY AND HACKINGInformation SecuritySecurity ArchitectureHacking ImpactsTHE FRAMEWORKBusiness Planning and OperationsReconnaissanceEnumerationVulnerability AnalysisExploitationFinal AnalysisDeliverableIntegration INFORMATION SECURITY PROGRAMScope of Information Security ProgramsThe Process of Information SecurityComponent Parts of Information Security ProgramsBUSINESS PLANNING AND OPERATIONSBusiness ObjectivesSecurity PolicyPrevious Test ResultsBusiness ChallengesThe Business of SecurityReasoningOverall ExpectationsHow Deep is Deep Enough?Timing is Everythi