Network Security Evaluation: Using the NSA IEM
Russ Rogers, Ed Fuller, Greg Miles, Matthew Hoagberg, Travis Schack, Ted Dykstra, Bryan W. Cunningham, Chuck Little · 2005
Introduction to the IEM Before You Start Evaluating Setting Expectations Scoping the Evaluation Legal Planning Chapter The Technical Evaluation Plan (TEP) Starting your On-Site Efforts Enumeration Activities Collecting the majority of vulnerabilities Fine Tuning the Evaluation On-Site Closing Meeting Evaluation Analysis Creating Measurements and Trending Results Trending Metrics Chapter Final Reporting Chapter IEM Summary Appendix A: Table of example tools for each of the 10 baseline activities Appendix B: Sample TEP layout