Penetration Testing: Assessing Your Overall Security Before Attackers Do

by Stephen Northcutt, Jerry Shenk, Dave Shackleford, Tim Rosenberg, Raul Sile, Steve Mancini Sept. 1, 2017 via SANS Institute

With multi-tier network architectures, Web services, custom applications, and heterogeneous server platform environments, keeping data and information assets secure is more difficult than ever. Coupled with this added complexity is the fact that criminal organizations have organized their hacking efforts; it is no longer just “script kiddies” trying to break into your network. In the past several years, it has become apparent that there is real money to be made from criminal hacking, and identity theft is one of the world’s fastest growing problems.

https://www.sans.org/reading-room/whitepapers/analyst/penetration-testing-assessing-security-atta...