Microsoft® Windows® 2000 Security Handbook

Chapter 28. Penetration Testing: Hack Your Own System

In this chapter

• Why Penetration Testing?

• Thinking As a Cracker

• Realizing Threats

• Tiger Teams

• External Consultants

• Getting Prepared for a Penetration Test

• Generating an Attack Plan

• Scouting the Site

• Collating and Evaluating Findings

• Exploiting the Site

• Reporting and Regimen

• Available Tools

Penetration testing is a controversial subject in the IT security field. It can help a systems manager ferret out potential security problems before they have a chance to manifest into actual security incidents. The controversy arises from the fact that performing a successful penetration test forces an administrator to think as a cracker would, using all available tools and techniques to break well-laid security plans. ...