Mastering Metasploit - Third Edition

Modeling the threat areas

Modeling the threat areas is an essential concern while carrying out a penetration test. This phase focuses on the specific areas of the network that are critical and need to be secured from breaches. The impact of the vulnerability in a network or a system is dependent upon the threat area. We may find some vulnerabilities in a system or a network. Nevertheless, those vulnerabilities that can cause any impact on the critical areas are of primary concern. This phase focuses on the filtration of those vulnerabilities that can cause the highest effect on an asset. Modeling the threat areas will help us to target the right set of vulnerabilities. However, this phase can be skipped at the client's request.

Impact analysis ...