Avoiding the weaknesses of a penetration test. Issue 4 (April 2019)

• Record Type: Journal Article
• Authors: Baiardi, Fabrizio
• Is Part Of: Computer fraud & security. Issue 4(2019)
• Page Start: 11
• Page End: 15
• Publication Date: 2019-04
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(19)30041-7
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : A penetration test is a traditional solution for evaluating and improving the robustness of an ICT system. Such tests can be comprehensive, but problems can arise when deciding how to use its results to select the countermeasures against a successful penetration. These problems may explain the successful attacks against systems that previously passed such tests. So, it's useful to look at some theoretical explanations of the weaknesses of a penetration test and suggest some alternatives.