Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_10

10. Penetration Testing

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

One of the finer arts in protecting assets from threats is penetration testing. While beginners, and sometimes news media, confuse vulnerability assessments with penetration testing, they are distinctly different disciplines. The confusion, however, is sometimes justified. Vulnerability assessment solutions can sometimes use exploit code in order to determine if a vulnerability is present (typically referred to as an “unsafe” or intrusive check). and penetration solutions can have network scanners to identify ...