RAZVOJ DOKUMENTACIJE O TESTIRANJU VDOROV V INFORMACIJSKE SISTEME Z OGRODJEM METASPLOIT

Leskovar, Rok

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	RAZVOJ DOKUMENTACIJE O TESTIRANJU VDOROV V INFORMACIJSKE SISTEME Z OGRODJEM METASPLOIT
Authors:	ID Leskovar, Rok (Author) ID Pucihar, Andreja (Mentor) More about this mentor...
Files:	MAG_Leskovar_Rok_2012.pdf (3,05 MB) MD5: BAF78FA1C296C80219DAD63709C6F396 PID: 20.500.12556/dkum/3081c9d9-2e26-4fce-9eec-799264faed0f
Language:	Slovenian
Work type:	Master's thesis
Organization:	FOV - Faculty of Organizational Sciences in Kranj
Abstract:	Magistrska naloga obravnava izdelavo dokumentacije za testiranje vdorov v informacijske sisteme (penetration testing, ethical hacking). Zaradi pomanjkanja standardov, ki bi natančneje opredelili testirno dokumentacijo, smo kot osnovo uporabili standard IEEE 829 (1998 in 2008). Standard je zrelejši in obsežnejši od obstoječih standardov (npr. standard PTES), namenjenih izdelavi dokumentacije za testiranje vdorov v informacijske sisteme. Izdelali smo testno okolje in izvedli test vdora v informacijski sistem. Za izvedbo testiranja vdorov v informacijske sisteme smo uporabili Metasploit ogrodje. Na podlagi tega testa smo izdelali dokumentacijo po standardu IEEE829. Dokumentacije nismo izdelali natančno po standardu. Upoštevali smo tiste dele, ki so za testiranje vdorov v informacijske sisteme smotrni. Izpustili smo na primer poročilo o napakah in poročilo stanja vmesnih testov. Dodane so nekatere točke, ki jih priporoča standard PTES (npr. skala za ocenjevanje informacijske ogroženosti). Navedeni so možni načini uporabe. Podali smo nasvete za izdelavo in bodoči razvoj dokumentacije za testiranje vdorov v informacijske sisteme.
Keywords:	Testiranja vdorov v informacijske sisteme, Dokumentacija za testiranje vdorov v informacijske sisteme, Ogrodje Metasploit, Standard IEEE 829, Standard PTES
Place of publishing:	Kranj
Year of publishing:	2012
PID:	20.500.12556/DKUM-37424
COBISS.SI-ID:	7112467
NUK URN:	URN:SI:UM:DK:6G59WILS
Publication date in DKUM:	16.01.2013
Views:	1752
Downloads:	199
Metadata:
Categories:	FOV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:	English
Title:	DEVELOPMENT OF DOCUMENTATION ON PENETRATION TESTING WITH METASPLOIT FRAMEWORK
Abstract:	This master thesis presents development of documentation for penetration testing. The field is affected with the lack of standards for documentation development. We suggested usage of standard IEEE 829 for that purpose. Standard IEEE 829 is primarly used for development of documentation for software testing. It can also be aplied to a fileld of penetration testing. In comparison with documentation developement standards for penetration testing, IEEE 829 is maturer and more comprehensive. Penetration testing lab was set up and tests were performed. Metasploit framework was used for that purpose. According to standard IEEE 829 penetration testing documentation was developed on basis of one of our tests. We used only material of standard that is relavant for penetration testing. For example anomaly report and interim test status report were not included in documentation. Some recommendations of PTES standard were also applied to our documentation (Information security risk rating scale). Usage possibilities of documentation are pointed out. We also recommended some guidelines for future development of standard.
Keywords:	Penetration testing, Penetration testing documentation, Metasploit Framework, Standard IEEE 829, Standard PTES

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back